Shibboleth behind a CDN

[chad phillips]

Found the issue.  We have a server farm.  Once we started using a CDN, it
caused issues with how we were forcing persistence on our server farm.  So
the requests were getting sent to a different server from the one that had
the user's Shibboleth session.

If we can't get persistence fixed,  from my reading, I can have Shibboleth
sessions stored in a database so they can be used amongst any server in the
server farm.
Would this be the right path for use cases where we are load balance among
several backend Apache servers?
https://shibboleth.atlassian.net/wiki/spaces/SHIB2/pages/2577072181/NativeSPStorageService

thanks


On Tue, Mar 28, 2023 at 7:55 AM Cantor, Scott via users <
users at shibboleth.net> wrote:

> I don't know what XHR is, nor anything about CDNs. The cookie is issued on
> a request for a protected page. By definition if you get a bunch you don't
> have the application designed appropriately. There should be a single top
> level resource requiring authentication covering everything else, not a lot
> of embedded content inside an unprotected page.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230329/06b56591/attachment.htm>