<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="margin-top: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Hello,</div>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
I am running a midPoint 4.8.10 cluster with three nodes sharing the same repository.</p>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Public URLs:</p>
<ul data-spread="false">
<li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<p style="margin-top: 0px; margin-bottom: 0px;" role="presentation" class="elementToProof">
<a style="margin-top: 0px; margin-bottom: 0px;" class="OWAAutoLink" id="OWA81d26a1f-28af-ebad-73f4-344a125af4cf" href="https://midpoint.example.com/midpoint">https://midpoint.example.com/midpoint</a> (main / load-balanced)</p>
</li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<p style="margin-top: 0px; margin-bottom: 0px;" role="presentation" class="elementToProof">
<a style="margin-top: 0px; margin-bottom: 0px;" class="OWAAutoLink" id="OWA444b1576-c1af-80e2-8460-bd5f80f31219" href="https://midpoint-node2.example.com/midpoint">https://midpoint-node2.example.com/midpoint</a></p>
</li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<p style="margin-top: 0px; margin-bottom: 0px;" role="presentation" class="elementToProof">
<a style="margin-top: 0px; margin-bottom: 0px;" class="OWAAutoLink" id="OWAe913c454-c222-d100-d19d-27c5a8e6bab0" href="https://midpoint-node3.example.com/midpoint">https://midpoint-node3.example.com/midpoint</a></p>
</li></ul>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
I need the <code>publicHttpUrlPattern</code> in the infrastructure config for the OIDC redirect URI to work with the IdP, but this seems to prevent accessing individual nodes directly.</p>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Indeed, when accessing a node directly, for example:</p>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<a style="margin-top: 0px; margin-bottom: 0px;" class="OWAAutoLink" id="OWAac1ac16a-323b-2526-6b1d-de97d0dcf6c2" href="https://midpoint-node2.example.com/midpoint/login?0">https://midpoint-node2.example.com/midpoint/login?0</a></p>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
or</p>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<a style="margin-top: 0px; margin-bottom: 0px;" class="OWAAutoLink" id="OWA07c76a28-21d8-a1e7-653b-9b677f737f94" href="https://midpoint-node2.example.com/midpoint/auth/emergency">https://midpoint-node2.example.com/midpoint/auth/emergency</a></p>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
the request reaches the node but midPoint immediately redirects to the canonical URL:</p>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<a style="margin-top: 0px; margin-bottom: 0px;" class="OWAAutoLink" id="OWAef318739-3ecc-ad4b-42f0-2854aeeb59e2" href="https://midpoint.example.com/midpoint/">https://midpoint.example.com/midpoint/</a>...</p>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Is it possible in a clustered setup to access a specific node directly (either via OIDC or via the emergency/auth path) while keeping OIDC active, without being redirected to the canonical hostname?</p>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Thanks.</p>
<div class="elementToProof" id="Signature">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<table style="background-color: white; box-sizing: border-box; border-collapse: collapse; border-spacing: 0px;" cellpadding="0" cellspacing="0" id="table_0">
<tbody>
<tr>
<td style="width: 229.172px; height: 37.15pt; padding: 0cm 0cm 4.5pt; box-sizing: border-box;">
<p style="line-height: normal; margin: 0cm 0cm 8pt; font-family: Calibri, sans-serif; font-size: 12pt;" class="elementToProof">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; color: rgb(0, 0, 0);"></span><span style="color: black;"><b>Dr. Marie Ioannou</b> </span></p>
<p style="line-height: normal; margin: 0cm 0cm 8pt;" class="elementToProof"><span style="font-family: Calibri, sans-serif; font-size: 12pt; color: black;">IAM Consultant </span></p>
</td>
<td style="width: 157.219px; height: 65.3125px; padding: 0cm; box-sizing: border-box;">
<p style="line-height: 1.38; margin: 0cm 0cm 8pt; font-family: Calibri, sans-serif; font-size: 12pt;" class="elementToProof">
<span style="color: rgb(0, 0, 0);"> </span><span style="font-family: Arial, sans-serif; font-size: 12px; color: rgb(51, 122, 183);"><u><a style="color: rgb(51, 122, 183); margin-top: 0px; margin-bottom: 0px;" data-auth="NotApplicable" data-linkindex="2" title="https://www.itconcepts.ch/" href="https://www.itconcepts.ch/"><img style="width: 150px; height: 40px; max-width: 655px; min-width: auto; min-height: auto; margin-top: 0px; margin-bottom: 0px;" height="40" width="150" data-olk-copy-source="MailCompose" id="x__x0000_i1032" alt="itc-logo" data-outlook-trace="F:1|T:1" src="cid:ad41ce18-0336-416b-99d8-4bcf53943526"></a></u></span></p>
</td>
</tr>
<tr>
<td style="width: 229.172px; height: 16.2pt; padding: 0cm; box-sizing: border-box;" colspan="2">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</td>
</tr>
</tbody>
</table>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
</div>
</body>
</html>