Shibboleth Sp 3.5 behind Azure APP GW

[Scott Cantor]

The answer to any load balancing question involving Apache is the same:

1. The client's address must be forwarded with a Forwarded header so the web server sees the right one in its logs.

2. The web server must be virtualized using ServerName like you would without the SP involved so the application can redirect to itself with standard APIs to determine the scheme, host, and port (which you can always examine with a CGI script that dumps out the standard environment).

Once those are done, there's nothing the SP has to do to work. That's it. And until you do those things, no amount of messing with the SP's settings matters, and messing with them isn't going to fix anything.


-- Scott