Problems with attribute checker

[Guillaume Rousse]

Le 12/12/2025 à 08:42, Annalena Reuss via users a écrit :
> The SP is running with a loadbalancer...could this be a problem?
Sure. Especially if you use an active/active setup, without session 
infinity.

As soon there is a need to manage connexion-specific server-side 
context, such as SP session, you'd rather use active/passive setup, much 
simpler to configure and debug, unless you really have actual load 
balancing issue. Otherwise, you have to configure some kind of 
client-based session affinity (using cookies, TLS session, whatever) to 
ensure each request of a given client is handled by the same backend.

Regards.
-- 
Guillaume Rousse
Direction des Services Applicatifs
RENATER - Paris

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4291 bytes
Desc: Signature cryptographique S/MIME
URL: <http://shibboleth.net/pipermail/users/attachments/20251212/cb55a6dd/attachment.p7s>