We have F5 Big-IP and config mapping domain name "www.aaa.com" to internal ip 10.10.1.113, and we have two web app "aaa-gateway" and "aaa-dealing" with same security-domain and deployed on same JBoss EAP 7, and enable SSO.
If we login in "aaa-dealing" via Big-IP, everything is OK. If we browse "aaa-gateway" and do HttpServletRequest.login() then redirect to "aaa-dealing" WITHOUT Big-IP (url is 10.10.1.113 not www.aaa.com), evertthing is OK and we don't need to login agagin when we browse "aaa-dealing". (we can found cookie JSESSIONIDSSO in the browser dev tool)
But if we browse "aaa-gateway" via Big-IP (url is www.aaa.com) and do HttpServletRequest.login() then redirect to "aaa-dealing", "aaa-dealing" will popup login page...(we can not found cookie JSESSIONIDSSO in this moment).
It seems like Big-IP missing something when redirect, does anyone have any idea?
Many thanks.