Issue

• With a clustered SAML Web Profile (Picketlink) environment with mod_cluster and AJP, if a SP is killed the authenticated user's browser is sent back to the IDP correctly. After the IDP re-authenticates and redirects the browser back to the SP, however, the browser gets a blank page and then evetually the connection times out and apache finally returns an proxy error page.
• Clustered (using mod_cluster or mod_proxy) Picketlink for SAML authentication has issues redirecting the user's browser from the IDP to the when communicating with AJP. Using http between Apache httpd and JBoss EAP works as expected.