This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to redirect to web portal when it is deployed behind load balancer and "openid" authentication module

Hi,

We have two web portals on 2 servers which is deployed behind load balancer. Load balancer used is AWS CLB and sticky session is also configured on CLB. Authentication module used for web portal is openid role based and for openid we have configured redirect URI as "https://<CLB>/OneIdentityManager/page.axd". And we are using Red Hat for SSO. When we hit the red hat URL, it checks the redirect URI of openid and the redirect URI which we can see is the URL of one of the web portal servers instead of CLB URL and thats the reason throws an error. How can we resolve this issue? We are using 8.0 version.

Top Replies

Parents

+1 Markus Weiss-Ehlers over 5 years ago

You need to configure the web portal URL in the web.config files of your web portals to point to https://<CLB>/OneIdentityManager/page.axd. In addition configure on off your entries in QBMWebApplication for your web portals to contain this URL (https://<CLB>/OneIdentityManager/page.axd) as well.
Cancel
Up +1 Down

Cancel
+1 ruchita.mantri over 5 years ago in reply to Markus Weiss-Ehlers

I changed web.config files in both web servers but unable to understand about the on off entries for web portal. Can you please explain how to do it?
Cancel
Up +1 Down

Cancel
+1 Markus Weiss-Ehlers over 5 years ago in reply to ruchita.mantri

Sorry, there is a typo in my post. Should read "In addition configure one of your entries in QBMWebApplication for your web portals to contain this URL (https://<CLB>/OneIdentityManager/page.axd) as well.
Cancel
Up +1 Down

Cancel
0 ruchita.mantri over 5 years ago in reply to Markus Weiss-Ehlers

ok so I have one doubt like if my CLB redirects to server1 where I have configured CLB URL in QBMWebApplicaiton, it will act as LB and again redirect to one of the servers but in case if my CLB redirects to server2 where Application URL is still that server's IP then will it not throw an error again?
Cancel
Up 0 Down

Cancel
0 Markus Weiss-Ehlers over 5 years ago in reply to ruchita.mantri

No, it won't. The URL is just a pointer for the web portal application on the IIS to find it's additional configuration from QBMWebApplication. So changing one entry is enough.

Or, even better, create a new entry in QBMWebApplication for your load balancer URL, but ensure to duplicate the other settings from one of your direct web portal entries in QBMWebApplication.
Cancel
Up 0 Down

Cancel
0 ruchita.mantri over 5 years ago in reply to Markus Weiss-Ehlers

Thanks Markus for the help. It worked.
Cancel
Up 0 Down

Cancel
0 ruchita.mantri over 5 years ago in reply to Markus Weiss-Ehlers

Hi Markus, as you suggested I made the changes in config file and qbmwebapplication table. But, now we are not able to login to synchronization editor where the connection is made to database via application server which is also deployed behind load balancer and we have 2 application servers behind load balancer. It throws an error "Please authenticate a session first".
Cancel
Up 0 Down

Cancel

Reply

0 ruchita.mantri over 5 years ago in reply to Markus Weiss-Ehlers

Hi Markus, as you suggested I made the changes in config file and qbmwebapplication table. But, now we are not able to login to synchronization editor where the connection is made to database via application server which is also deployed behind load balancer and we have 2 application servers behind load balancer. It throws an error "Please authenticate a session first".
Cancel
Up 0 Down

Cancel

Children

0 Markus Weiss-Ehlers over 5 years ago in reply to ruchita.mantri

It's getting complicated now. You may want to contact support.

But, the application server should use the same session certificate and the load balancer needs to be configured to use sticky sessions as well.
Cancel
Up 0 Down

Cancel
0 ruchita.mantri over 5 years ago in reply to Markus Weiss-Ehlers

ok we will contact support. Thank you.
Cancel
Up 0 Down

Cancel
0 ruchita.mantri over 5 years ago in reply to ruchita.mantri

Hi Markus,

One question on web portal which is running behind load balancer. We are not able to establish WCF connection in web designer for web portal (URL provided is https://<CLB>/OneIdentityManager). How can we achieve this?
Cancel
Up 0 Down

Cancel