Massive authentications from SP GoogleApps

[Miguel Salinas Vivancos]

Hi,
We are using Shibboleth IDP 3.4.4 over Java 1.8, deployed in a Tomcat 8.5.
We have multiple SPs configured to authenticate against our IDP, including big commercial ones like Amazon, Adobe and Microsoft.

Our problem is that sometimes (maybe once or twice a week), we receive a huge amount of authentications from GoogleApps.
I'm talking over 250 logins in a few seconds when the average for that SP is 5 per minute.

At the logs we have seen that on that peek the user is always the same, and Shibboleth is generating different sessions. On different peeks, the users are different so it doesn't seem a problem of specific users.

This also happened to us with IDP 3.1.2 over Java 1.7 in a Tomcat 7, so the version of the components neither seems to be the problem.

Has anyone faced something similar? Maybe one of the applications of GoogleApps or the OS/device of the users?

Thank you in advance


Miguel Salinas Vivancos
Identity Management Integrator
Tel.: +34 639 198 154 - mail:msalinas at bcn.sia.es

[cid:image001.png at 01D52CD1.D29CDC20]

Grupo SIA
Citypark, Edificio Atenas, Ctra. Hospitalet 147. 08940 Cornellá de Llobregat - Barcelona
www.sia.es<http://www.sia.es/>  - Twitter: @SIA_es  - LinkedIn: Grupo SIA



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190902/960a8fa5/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 5341 bytes
Desc: image001.png
URL: <http://shibboleth.net/pipermail/users/attachments/20190902/960a8fa5/attachment.png>