Best Practice for SAML, F5

The way the F5 is configured today is it routes all SAML requests to a single server, if that server becomes unresponsive then it routes all traffic to a second server. This is what I refer to as actrive/passive.

When this event occurs, the second server becomes the primary, active server. If the first server comes back online, I now have a situation where the F5 recognizes both as active and begins to route traffic to "both" servers, it doesn't revert back to one = primary and two = passive.