<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texto de globo Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
span.EstiloCorreo17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.TextodegloboCar
{mso-style-name:"Texto de globo Car";
mso-style-priority:99;
mso-style-link:"Texto de globo";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="ES" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">We are using Shibboleth IDP 3.4.4 over Java 1.8, deployed in a Tomcat 8.5.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">We have multiple SPs configured to authenticate against our IDP, including big commercial ones like Amazon, Adobe and Microsoft.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Our problem is that sometimes (maybe once or twice a week), we receive a huge amount of authentications from GoogleApps.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I’m talking over 250 logins in a few seconds when the average for that SP is 5 per minute.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">At the logs we have seen that on that peek the user is always the same, and Shibboleth is generating different sessions. On different peeks, the users are different so it doesn’t seem a problem of specific users.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">This also happened to us with IDP 3.1.2 over Java 1.7 in a Tomcat 7, so the version of the components neither seems to be the problem.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Has anyone faced something similar? Maybe one of the applications of GoogleApps or the OS/device of the users?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thank you in advance<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="767" style="width:460.35pt;margin-left:5.4pt;border-collapse:collapse">
<tbody>
<tr style="height:62.55pt">
<td width="767" colspan="2" valign="top" style="width:460.35pt;border:none;border-right:solid white 1.0pt;padding:0cm 0cm 0cm 0cm;height:62.55pt">
<p class="MsoNormal"><b><span lang="EN-US" style="color:#0099D4">Miguel Salinas Vivancos</span></b><b><span lang="EN-US" style="font-size:10.0pt;color:#0099D4"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#404040">Identity Management Integrator
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:6.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:0cm;text-align:justify;line-height:120%">
<span lang="EN-US" style="color:#404040">Tel.: +34 639 198 154</span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#404040">
</span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#0099D4">–
</span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#404040">mail:msalinas@bcn.sia.es</span><b><span lang="EN-US" style="color:#404040"><o:p></o:p></span></b></p>
</td>
</tr>
<tr style="height:2.8pt">
<td width="118" valign="top" style="width:70.9pt;border:none;border-right:solid #0099D4 1.0pt;padding:0cm 0cm 0cm 0cm;height:2.8pt">
<p class="MsoNormal" style="mso-margin-top-alt:6.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:0cm;text-align:justify;line-height:120%">
<b><span style="color:#404040;mso-fareast-language:ES"><img width="100" height="56" id="Imagen_x0020_1" src="cid:image001.png@01D561C1.21D22420" alt="cid:image001.png@01D52CD1.D29CDC20"></span></b><b><span style="color:#404040"><o:p></o:p></span></b></p>
</td>
<td width="649" style="width:389.45pt;border:none;border-right:solid white 1.0pt;padding:0cm 0cm 0cm 0cm;height:2.8pt">
<p class="MsoNormal"><b><span style="font-size:9.0pt;color:#404040">Grupo SIA</span></b><b><span style="font-size:9.0pt;color:#404040"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#404040">Citypark, Edificio Atenas, Ctra.
</span><span lang="EN-US" style="font-size:9.0pt;color:#404040">Hospitalet 147. 08940 Cornellá de Llobregat – Barcelona<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:6.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:0cm;text-align:justify;line-height:120%">
<span style="font-size:9.0pt;line-height:120%;color:#404040"><a href="http://www.sia.es/"><span lang="EN-US" style="color:#404040">www.sia.es</span></a></span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#404040">
</span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#0099D4">-
</span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#404040">Twitter:</span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#0099D4">
</span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#404040">@SIA_es
</span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#0099D4">-
</span><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#404040">LinkedIn: Grupo SIA</span><b><span lang="EN-US" style="font-size:9.0pt;line-height:120%;color:#404040"><o:p></o:p></span></b></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:ES"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
</body>
</html>