Setup with 2 load balancers (Binding Exception)

[Sumit Bhatnagar]

We have a setup for a web application which includes and external load balancer in the DMZ (This is available at URL; https://LBExternal.app.org) .

The application servers are in the internal network behind the internal load balancer (available at https://LBInternal.app.org) .

Apache Websever is used in the DMZ. Combination of Apache and Tomcat is used on the application servers in the internal network.

Shibboleth is configured on the application servers as Service provider. The IdP is OKTA.

I am getting an error message when configuring the application with external load balancer.
-------------------------------------------------------------------
opensaml::BindingException

The system encountered an error at Mon Mar 4 21:55:32 2024

To report this problem, please contact the site administrator at root at localhost<mailto:root at localhost>.

Please include the following message in any email:

opensaml::BindingException at (https://LBInternal.app.org/Shibboleth.sso/SAML2/POST)

SAML message delivered with POST to incorrect server URL.

-------------------------------------------------------------------
Shibd.log has the error message below:

ERROR OpenSAML.MessageDecoder.SAML2POST [1] [default]: POST targeted at (https://LBExternal.app.org/Shibboleth.sso/SAML2/POST), but delivered to (https://LBInternal.app.org/Shibboleth.sso/SAML2/POST)

Please advise is this can be corrected by configuration change to the shibboleth configuration or the Apache configuration?

Best regards,
Sumit Bhatnagar.
Team Lead IT.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240305/869edbba/attachment.htm>