Shibboleth SP behind load balancer with session affinity

[Cantor, Scott]

>I would like to test this, but I would like a way to verify that the load balancer is doing its job and we don’t have a
> significant number of users being redirected by to the IdP because they ended up on the wrong server on their way back
> from the IdP. Is there something that will show up in the logs when this happens?

Using the default relayState mechanism requires affinity across the login loop, and would be identifiable by setting homeURL to something unusual and checking for any access to it.

Using cookie-backed relayState limits the affinity requirement to after the POST back to the SP and I don't know offhand what it logs, probably something in native.log related to an unidentified session.

-- Scott