-
Titolo
Using a load balancer and servers asking for credentials when SSO switches among servers. Users not being able to logout. Users being prompted to log in. -
Descrizione
Using a load balancer with servers and the session information is shared between these servers.
The problem is that authentication does not happen when we change to the other IP resulting in the user being logged out and asked to authenticate again.
Users also may not be able to logout.
-
Causa
Configuration issue - The ip address being used in the load balancer is not a sticky IP.
-
Risoluzione
The load balancer must have persistence enabled to ensure users always use the same proxy host unless in a failover situation. The 'persistence' ensures that a user is always using the same proxy, and thus the same session.
If the user switches proxy, then the session information will be lost and the user will have to log back in.
Persistence is also known as affinity or sometimes 'sticky ip'.
See the link for more information in the online HA Guide. -
Informazioni aggiuntive
For more information, please read the One Identity Cloud Access Manager 8.1 - How To Configure for High Availability available with the product download and on the Support Portal. For assistance with configuration or troubleshooting for Load Balancers please open a ticket with that vendor.