Feature request: SAML2 Backend key/value store to store request IDs for running multiple instances

[k4l397]

Code Version

8.2.0

Use case

If running multiple instances of the proxy it'd be useful to be able to connect an external store (e.g. redis) for request IDs. Currently request IDs are stored in memory (in a dictionary) which means if you're running 2 instances of the proxy, the same instance must receive the SAML response from the IDP.

Doing this should allow:

• multiple instances of the SAML proxy to be run - allowing for easier horizontal scaling
• prevents outstanding auth Journey's being broken if an instance needed to be restarted

Possible Solution

• Allow redis (or other) store to configured and used in SAML2 proxy backend
• use redis for oustanding_queries with an in memory fallback (if not configured)