---
title: "Discussion on \"Application health checking and load balancing CyberArk (now Idira) Privileged Vault Web Access with HAProxy\" | Hashnode"
description: "Discussion on \"Application health checking and load balancing CyberArk (now Idira) Privileged Vault Web Access with HAProxy\". The Privileged Vault Web Access is the most straightforward component to load balance in CyberArk (now Idira)'s Privileged Access Security solution but despite this it is still easy to misconfigure on"
url: "https://hashnode.com/posts/application-health-checking-and-load-balancing-cyberark-privileged-vault-web-access-with-haproxy/61f57b396bb59d5767db6d85"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Application health checking and load balancing CyberArk (now Idira) Privileged Vault Web Access with HAProxy](https://timschindler.blog/application-health-checking-and-load-balancing-cyberark-privileged-vault-web-access-with-haproxy?utm_source=hashnode&utm_medium=feed)

The Privileged Vault Web Access is the most straightforward component to load balance in CyberArk (now Idira)'s Privileged Access Security solution but despite this it is still easy to misconfigure on

Jan 29, 2022 · 11 min read · timschindler.blog  
Updated Jun 16  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#proxy](https://hashnode.com/tag/proxy)
-   [#docker](https://hashnode.com/tag/docker)
-   [#cybersec](https://hashnode.com/tag/cybersec)
-   [#cyberark](https://hashnode.com/tag/cyberark)
-   [#idira](https://hashnode.com/tag/idira)

## Written by

[Tim Schindler](https://hashnode.com/@timschindler)

@timschindler · Amsterdam, NL

  
[View profile](https://hashnode.com/@timschindler)

Idira (CyberArk) MVP, Guardian | Principal Consultant at CyberIAM

Originally from the USA, working in Amsterdam, Netherlands in the digital identity space.

## Responses 1

Markdown supported · ⌘↵ to post

[Vekh](https://hashnode.com/@Vekh)

[Mar 6, 2024](https://hashnode.com/posts/application-health-checking-and-load-balancing-cyberark-privileged-vault-web-access-with-haproxy/61f57b396bb59d5767db6d85/comment/65e84a2f84ecb3c9aac4488a)

Would it be possible to you to also show how to configure HAProxy in a way to work with SAML/SSO? I've tried to forward headers, but still ending up with "MSIS3200: No AssertionConsumerService is configured on the relying party trust (...)" error message from ADFS. Not sure if I need to do something else or simple "option forwardfor header X-Client" will not work for this case.