To Enable Load Balancer Support

1. Install Access Manager and Federation Manager and follow the documentation to set up a load balancer.

   Load balancing information for Access Manager can be found in Sun Java System Access Manager 7 2005Q4 Deployment Planning Guide.

2. Install the SAML v2 Plug-in for Federation Services on any machines acting as an identity provider or a service provider.

3. On any service provider machines, copy the metadata configuration files into the same directory and rename as follows:

   • spMeta.xml to spMeta.xml.lb

   • spExtended.xml to spExtended.xml.lb

4. Edit the new service provider load balancer metadata configuration files as follows:

   • Change the host name of the service provider to that of the load balancer on the service provider side.

   • Change the port of the service provider to that of the load balancer on the service provider side.

   • Change the metaAlias of the service provider to any new metaAlias, for example, /splb.

5. On any identity provider machines, copy the metadata configuration files into the same directory and rename as follows:

   • idpMeta.xml to idpMeta.xml.lb

   • idpExtended.xml to idpExtended.xml.lb

6. Edit the new identity provider load balancer metadata configuration files as follows:

   • Change the host name of the identity provider to that of the load balancer on the identity provider side.

   • Change the port of the identity provider to that of the load balancer on the identity provider side.

   • Change the metaAlias of the identity provider to any new metaAlias, for example, /idplb.

7. Import the new hosted metadata onto the service provider machines.

8. Import the new remote identity provider metadata onto the service provider machines.

9. Import the new hosted metadata onto the identity provider machines.

10. Import the new remote service provider metadata onto the identity provider machines.

11. Restart the web containers.