SSPR HA Supported?

[jameswatson3]

I can't find any documentation on the subject so I thought I'd ask
here.

We're considering using CLE on 20K workstations so we would need high
availability for the SSPR dependency.

The architecture being tested is:

-2+ SSPR Servers running on Windows 2012 R2
-LDAP is Active Directory
-DB for Challenge/Response is remote MS SQL
-Load balancer sits in front of SSPR nodes
-SSPR nodes use common SSPRConfiguration.xml

My basic question is if this configuration would be supported if I
needed to open an incident.

Secondarily I'd be interested in any other general advisability comments
on the design under consideration.


--
jameswatson3
------------------------------------------------------------------------
jameswatson3's Profile: https://forums.netiq.com/member.php?userid=565
View this thread: https://forums.netiq.com/showthread.php?t=55679

[lhaeger]

jameswatson3 wrote:

> My basic question is if this configuration would be supported if I
> needed to open an incident.

To obtain an official answer, opening a SR and asking support directly might be
the easiest and fastest route.

Should be part of the docs, though.

--
http://www.is4it.de/en/solution/identity-access-management/

[jrivard]

This will work fine, just make sure both SSPR servers have the same
configuration as you stated. Also make sure your load balancer is set
up to use sticky-sessions.


--
jrivard
------------------------------------------------------------------------
jrivard's Profile: https://forums.netiq.com/member.php?userid=541
View this thread: https://forums.netiq.com/showthread.php?t=55679

[swsmith]

You're not being specific as to what your concern is, but as Jason
indicates using a load balancer configuration is actually quite common
and is a valid way to achieve scaling.