SP 3 and reverseProxy
Jehan PROCACCIA
jehan.procaccia at tem-tsp.eu
Sun Oct 28 18:12:49 EDT 2018
hello
it is not clear to me if I can use an apache reverseProxy to serve multiple web application and save the pain of deploy shibboleth SP on each of those web hosts.
The idea beeing to install,configure and publish metadata of a single shibboleth SP only for the reverseProxy and not on the all the multiple ressources web hosts.
from https://wiki.shibboleth.net/confluence/display/SHIB2/SPReverseProxy it seems that while using a reverseProxy we still need to deploy shibboleth SP on the ressource server (web applications), so there's no deploy and configure factoring gain with the reverseproxy !?
with SP3 doc, there's no more specific reverse proxy doc, appart from :
https://wiki.shibboleth.net/confluence/display/SP3/OneOrMany
I understand that serving hundreds of web apps behind a single reverseProxy will be a spof and a bottleneck , but for a dozen of web apps is it still possible ? recommended ?
Regards
PS: here's a sample doc I found: https://hungreyweasel.wordpress.com/saml-ssos-shibboleth-sp-reverse-proxy/ for SP2 ...
More information about the users
mailing list