Forum Discussion

Nimbostratus

Sep 27, 2021

OAuth token synchronization in APM HA pair

Hello. I have an HA pair of APMs, acting as a OAuth authorization server. By default, devices in HA should synchronized OAuth tokens from Active to Standby. But I don't see issued tokens on Standb...

application delivery

BIG-IP Access Policy Manager (APM)

oauth

security

Illia

Nimbostratus

Sep 29, 2021

Hello, Angelo. I'm not clearly understand your considerations. My devices is in one trust domain and in one Sync-Failover device group.

https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-access-policy-manager-oauth-configuration/apm-oauth-overview.html

As I can see here, "HA supports real-time synchronization of the BIG-IP configuration, including the OAuth database, and switching over seamlessly when needed."

Why we need additional Syn-Only device group?

Angelo_V
Cirrus
Sep 29, 2021
I think you are right, you don't need an additional Sync-Only device group.
Try to check the statemirror.mirrorsession system database variable, it should be enable

list /sys db statemirror.mirrorsessions