<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7UinSAFOkta Classic EngineAdministrationAnswered2024-04-16T11:50:45.000Z2017-10-04T15:04:43.000Z2017-10-04T15:04:43.000Z

izeip (izeip) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:19 AM
IWA via a Load Balancer
Hi,

 

For resiliency, I want to load balance (via a Netscaler) any requests to the IWA site to multiple servers running the IWA Web App. Okta doesn't seem to have specific documentation on what exactly is required. I would prefer the load balancer to be transparent, in SSL-Bridge mode, not decrypting the traffic.

 

- Persistence type/length?

- Monitoring (Just sso.domain.com/iwa/auth.aspx for code 200)?

- Ports (80 and 443)?

- Anything else I'm overlooking?

 

Thanks for any help.

  • 2 answers
  • 1.58K views

  • taylor.wells1.4885773203199763E12 (Okta, Inc.)

    We do not have any Netscaler-specific documentation regarding IWA and Netscaler, but the only configuration changes required for IWA to work with a load-balancer is to make sure the "Public Gateway IPs" list is updated to include the IP Gateways of the Netscaler load balancer. This is done in the Admin portion of Okta under "Security -> Authentication -> Active Directory".  If you have any other questions about this or would like help with the configuration you can always open a case with our Tech Support department. We are always happy to help out.
    Expand Post

  • izeip (izeip)

    Hi Taylor,

     

    Thanks for your response. Aren't Public Gateway IP Addresses same as zones and only used to evaluate on/off network? Since this load balancer would be internal, I don't think anything is required.

     

    I did log this with support and this was their "helpful" response.

     

    We have several customers using load balancer, but we do not offer support for this implementation thus the reason we do not have any documentation for it. 

    Please let me know if you require any additional information.Thank You
    Expand Post
This question is closed.
Loading
IWA via a Load Balancer