Article - CS341464
Connection issue to Windchill SSO cluster using Amazon Web Services Elastic Load Balancing
Modified: 26-Dec-2023
Applies To
- FlexPLM 11.2 to 12.1
- Windchill PDMLink 11.1 to 13.0
- Windchill is configured as cluster
- SSO authentication is configured with one shibboleth-sp on each node
Description
- Connection issue to Windchill SSO cluster using Amazon Web Services Elastic Load Balancing (AWS ELB)
- Login redirection between Windchill and the IDP, login page flickering
- Redirection to Windchill Apache (https://<WINDCHILL>) page instead of Windchill home page (https://<WINDCHILL>/Winchill) after successful authentication
- UI shows "It works!" message when trying to access Windchill URL :
- Shibd.log are reporting that shibboleth authentication is not handled by same shibboleth node :
- Shib log of node 1 :
2021-03-22 10:12:12|Shibboleth-TRANSACTION.AuthnRequest|||https://XX/ceb7963e26af/||||||urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect||||||
- Shib log of node 2 :
2021-03-22 10:12:26|Shibboleth-TRANSACTION.Login|[email protected]|_f184e27602366ccaa1c9af6c818b366d|https://XXX/ceb7963e26af/|_f1ee7dcc-ec1c-45fc-8c16-2a79f4006700|urn:oasis:names:tc:SAML:2.0:ac:classes:Password|2021-03-22T10:12:21|uid(1)|XXXX|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST||urn:oasis:names:tc:SAML:2.0:status:Success|||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.150 Safari/537.36|X.X.X.
This is a printer-friendly version of Article 341464 and may be out of date. For the latest version click CS341464