Using OAuth2 to share access for 2 DataCenters

Hello.

 

I have two datacenters which serve the same app, masked by one APM device for authentication (using SSO to the backend) for each DC.

 

When one DataCenter is down, all users that were using this DC start using the backup DC, but they have to authenticate again. I was searching ideas to avoid this (re-auth).

 

One idea is to use OAuth2 with an external Authorization Server(shared by both DC). But checking deployment guides, I have seen all alternatives are using a logon page as initial step for initiation.

 

 

I think the solution doesn't fix my initial requirement (avoid re-authentication when my users are moving from one DC to another).

 

Please, could you confirm if I could avoid the reauthentication step using OAuth2?

 

Any other ideas to get my requirement?

 

References:

 

https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-sso-13-1-0/37.html https://clouddocs.f5.com/training/community/iam/html/class2/class2.html

 

KR, Dario.