SP 3 and reverseProxy

Jehan PROCACCIA jehan.procaccia at tem-tsp.eu
Sun Oct 28 18:12:49 EDT 2018


hello

it is not clear to me if I can use an apache reverseProxy to serve multiple web application and save the pain of deploy shibboleth SP on each of those web hosts. 
The idea beeing to install,configure and publish metadata of a single shibboleth SP only for the reverseProxy and not on the all the multiple ressources web hosts.

from https://wiki.shibboleth.net/confluence/display/SHIB2/SPReverseProxy it seems that while using a reverseProxy we still need to deploy shibboleth SP on the ressource server (web applications), so there's no deploy and configure factoring gain with the reverseproxy !?

with SP3 doc, there's no more specific reverse proxy doc, appart from :

https://wiki.shibboleth.net/confluence/display/SP3/OneOrMany

I understand that serving hundreds of web apps behind a single reverseProxy will be a spof and a bottleneck , but for a dozen of web apps is it still possible ? recommended ?

Regards

PS: here's a sample doc I found: https://hungreyweasel.wordpress.com/saml-ssos-shibboleth-sp-reverse-proxy/ for SP2 ...


More information about the users mailing list