3 Replies Latest reply on Oct 17, 2016 5:43 PM by ctomc

    WildFly 10 and SSO

    zukerman

      I'm using wildfly 10.1.0 and the SSO works great but:

      • if I authenticate from APP1 and try to get any resource (such as an HTML file) from APP2, it will take 16 seconds from the APP2 to send the first response (TTFB).
      • if I authenticate from APP2 and try to get any resource (such as an HTML file) from APP1, it will take 16 seconds from the APP1 to send the first response (TTFB).
      • if I remove the SSO from the server's configuration and authenticate on both apps separately, resources are loaded within expected waiting time (less than seconds)

       

      In conclusion: when using SSO, WildFly takes longer to serve the first request from the app that was not the one where the user authenticated first. After serving the first response, future gets will = have normal waiting time (less than a second).

       

      Any ideas on how to solve this matter?

       

      Thanks,

      David.

        • 1. Re: WildFly 10 and SSO
          jaikiran

          Can you take 2-3 thread dumps (using jstack or any other method) with an interval of around 3 seconds each when this 16 second delay happens? Attach those thread dumps to this discussion.

          • 2. Re: WildFly 10 and SSO
            jaikiran

            David Zukerman wrote:

             

            I'm using wildfly 10.1.0 and the SSO works great but:

            • .....it will take 16 seconds from the APP2 to send the first response (TTFB).

            By the way, what's TTFB?

            • 3. Re: WildFly 10 and SSO
              ctomc

              jaikiran pai wrote:

               

              David Zukerman wrote:

               

              I'm using wildfly 10.1.0 and the SSO works great but:

              • .....it will take 16 seconds from the APP2 to send the first response (TTFB).

              By the way, what's TTFB?

              Time To First Byte.

               

               

              What kind of SSO are you using? picketlink? keycloak? clustered SSO?