# SSO not working across instances

**URL:** <https://forum.payara.fish/t/sso-not-working-across-instances/673>\
**Category:** Technical Discussion\
**Created:** [August 15, 2023, 1:51pm UTC](https://forum.payara.fish/t/sso-not-working-across-instances/673 "2023-08-15T13:51:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![fanczy](https://avatars.discourse-cdn.com/v4/letter/f/b5e925/32.png) [@fanczy](https://forum.payara.fish/u/fanczy)\
**Post date:** [August 15, 2023, 1:51pm UTC](https://forum.payara.fish/t/sso-not-working-across-instances/673/1 "2023-08-15T13:51:50Z")

</div>

Hello,

I’m trying to get the SSO to work across instances but I just can’t make it work.

I have 3 machines, 1 is running DAS and the other two are running Payara Server instances with shared configuration.

In this configuration I have the Availability service enabled  
In Web Container Availability I have Single Sign-On State enabled and Persistence Type set to Hazelcast  
In HTTP Service SSO is Enabled  
In Virtual Server SSO is Enabled

Then I have 2 Applications  
Both have `<distributable/>` tag in web.xml  
Both have cookieDomain and cookiePath set in glassfish-web.xml

Now the problem:  
When I deploy Application1 and Application2 both on the same instance, the SSO works.  
I have login page in Application1 and after logging in there, I can access secured pages in Application2.

BUT, when I deploy Application1 on Instance1 and Application2 on Instance2, then I login to Application1 and then I access Application2 on Instance2, I get this error message in log:

```auto
[2023-08-15T15:02:46.177+0200] [Payara 6.2023.6] [SEVERE] [AS-WEB-CORE-00037] [jakarta.enterprise.web.core] [tid: _ThreadID=105 _ThreadName=http-thread-pool::http-listener-1(1)] [timeMillis: 1692104566177] [levelValue: 1000] [[
  An exception or error occurred in the container during the request processing
java.lang.NullPointerException: Cannot invoke "org.apache.catalina.core.StandardContext.getManager()" because "context" is null
	at org.glassfish.web.ha.authenticator.HASingleSignOnEntry.<init>(HASingleSignOnEntry.java:91)
	at org.glassfish.web.ha.authenticator.HASingleSignOn.lookup(HASingleSignOn.java:167)
	at com.sun.enterprise.security.web.GlassFishSingleSignOn.invoke(GlassFishSingleSignOn.java:371)
	at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:726)
	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:577)
	at org.apache.catalina.connector.CoyoteAdapter.doService(CoyoteAdapter.java:369)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:239)
	at com.sun.enterprise.v3.services.impl.ContainerMapper$HttpHandlerCallable.call(ContainerMapper.java:520)
	at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:217)
	at org.glassfish.grizzly.http.server.HttpHandler.runService(HttpHandler.java:174)
	at org.glassfish.grizzly.http.server.HttpHandler.doHandle(HttpHandler.java:153)
	at org.glassfish.grizzly.http.server.HttpServerFilter.handleRead(HttpServerFilter.java:196)
	at org.glassfish.grizzly.filterchain.ExecutorResolver$9.execute(ExecutorResolver.java:88)
	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:246)
	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:178)
	at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:118)
	at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:96)
	at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:51)
	at org.glassfish.grizzly.nio.transport.TCPNIOTransport.fireIOEvent(TCPNIOTransport.java:510)
	at org.glassfish.grizzly.strategies.AbstractIOStrategy.fireIOEvent(AbstractIOStrategy.java:82)
	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.run0(WorkerThreadIOStrategy.java:83)
	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy$WorkerThreadRunnable.run(WorkerThreadIOStrategy.java:101)
	at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:535)
	at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.run(AbstractThreadPool.java:515)
	at java.base/java.lang.Thread.run(Thread.java:833)
]]

```

Does anyone know what I’m missing or what am I doing wrong? If so, please try to direct me in the right way.

Thank you all in advance,  
have a good day.

---

<div class="post-metadata">

**Author:** ![k15](https://avatars.discourse-cdn.com/v4/letter/k/9d8465/32.png) [@k15](https://forum.payara.fish/u/k15)\
**Post date:** [September 6, 2023, 10:30am UTC](https://forum.payara.fish/t/sso-not-working-across-instances/673/2 "2023-09-06T10:30:18Z")

</div>

I think this solution wont work in principle. According to the manual - the sso-enabled flag meaning:  
If true, single sign-on is enabled by default for all web applications on all virtual servers on this server instance that are configured for the same realm

NOT across different instances