The clustering docs for the current version are in [1], not where you linked. Beyond that, your description in absolute terms means you're simply incorrect. They are in fact sharing the encryption key, or some non-client-side session store is being used outright. -- Scott [1] https://wiki.shibboleth.net/confluence/display/IDP4/Clustering