The following is the recommended approach to configure Trusted Authentication using Strategy in a cluster environment to ensure that Trust authentication works properly.
- Bypass the Load balancer/cluster for the Web Servers so that you are connecting directly to a single web server node
- Shut down all I-servers in the cluster so that a single I-Server is running.
- Create the trust relationship from each Web Server with each of the Strategy Intelligence servers by ensuring only 1 I-Server is up at a time.
- Repeat steps 1- 3 for each individual Node for both the web and i-servers in the environment. The idea behind this is that there is an established unique trust token (relationship) for every type of connection possible per node. For example if you have 2 Web servers and 2 iservers clustered, there needs to be 4 individual trust tokens.
- Once the above is complete start all I-Server nodes
- Test the relationship from each of the Web Server and make sure trust authentication is working properly.
- Now, Test the trust authentication from the Load balanced Web servers using the Load balancer/Cluster URL.
For more information on how to configure Trusted authentication, please refer to the following technote:
- KB30292 : How to setup Trusted Authentication (Single Sign On) for the Strategy Intelligence Server 9
