Session sharing in HA mode issue

In BMC Atrium Single Sign-On High Availability (HA) mode, session sharing can fail in some specific network environments when the default protocol (multicast) is used by ApacheMQ. ApacheMQ is a third party component which is used by Atrium Single Sign-On to inform all nodes in the cluster about sessions’ creation and termination events. If  session sharing fails, change the configuration settings to an alternative protocol.

To configure point-to-point sessions sharing

Perform the following on each node in the HA cluster.

1. Navigate to the <AtriumSSOinstallationDirectory>/tomcat/webapps/atriumsso/WEB-INF/classes/ directory.
2. Edit the activemq.xml file.
3. Replace the following tag:
    <transportConnector uri="ssl://localhost:0?transport.needClientAuth=true&amp;daemon=true" discoveryUri="multicast://default?daemon=true&amp;group=atsso" />
   
   with:
    <transportConnector uri="ssl://<hostname>:<port>?transport.needClientAuth=true&amp;daemon=true " />
   
   
   where:
   hostname — The host name of the current node.
   port — The port which will be used for the sessions sharing on this node.

4. Replace the following tag:
    <networkConnector uri="multicast://default?daemon=true&amp;group=atsso" />
   
   with:
    <networkConnector uri="static:(ssl://< hostname>:<port>?daemon=true[,ssl://< hostname>:<port>?daemon=true,…])"/>
   
   where:
   hostname — The host name of another node in the HA cluster.
   port — The port which is used by another node for session sharing.

   Note

   The <hostname>:<port> pair is specified on another node in the <transportConnector /> tag.

5. Save the file.