Load Balancing Multiple Active Directory Connectors
Load balancers distributes traffic across multiple servers and ADCs. The purpose is to provide a balanced service across its
pool of servers and increasing resiliency.
My1Login ADCs can be installed across
multiple domain controllers in this pool of servers within a load balanced infrastructure. Any incoming traffic for My1Login’s ADCs can be directed to ensure the
network does not become bottlenecked. This provides resiliency to your My1login configuration providing back up for users performing Active
Directory Single Sign On into My1Login.
Example Configuration
Example Configuration
The diagram above shows two Domain Controllers each
connected to two separate servers that both have an ADC installed on them. Both behind a load balancer to distribute traffic between them and a
DNS load balancer to distribute traffic flow between the load balancers. Whenever
traffic requests come in, dependant on the algorithm set by the load balancers,
will decide which load balancer and subsequently which ADC to go to.
To reduce
output duplication, we recommend that if you are using the 'Domain Monitoring' feature that you set that to be enabled on only one My1Login ADC.
Setting up My1Login to use Load Balancing
To configure My1Login for load balancing, you need to change the ADC URL option on the admin screen within your My1Login account.
In “Active Directory Connector URL” (in a simple environment this would contain the URL of the location of My1Login’s
ADC) the value should be set as the URL of the Load Balancer instead.
Your My1Login configuration will now use your load balanced environment.
When changing the Active Directory Connector URL, you should maintain the port value to be 47810
Updating My1Login ADC's Certificate
Create a new web server certificate the same way as stated in the SSL Certificates - Windows Certificate Service page, but instead for the common and DNS name, input the same value as has been put into the Active Directory Connector URL.