Shibboleth SP3 Premature Session Expiration

[Cantor, Scott]

On 12/19/18, 10:02 AM, "users on behalf of Michael Kim" <users-bounces at shibboleth.net on behalf of michaeljkim at gmail.com> wrote:

> I do agree with you though.  I think if we bypassed the load balancer and had everyone simple hit the SP and apache
> web server, then I’d definitely turn the address checks back on.

Proxies all have support for client address forwarding with trusted headers.

-- Scott