Improved: Tomcat SSO in Cluster
Finally this was not done, noted in security.properties
Thanks: James Yong for the proposition, Michael for the discussionn in
@@ -122,6 +122,7 @@ security.login.cert.allow=true
security.login.cert.pattern=^(\\w*\\s?\\w*)\\W*.*$
# -- use Tomcat SingleSignOn valve
+# -- Tomcat SSO should not be used in a cluster: OFBIZ-10123
security.login.tomcat.sso=false
# -- Hours after which EmailAdressVerification should expire
