Disabling group membership update at login time for web applications
When a user logs in to Business Automation Workflow web applications such as Process Portal, group membership is recalculated and can be cached for that user on the database, in order to keep accurate permission checks based on group memberships. This process might significantly affect performance because it can take up to several seconds, depending on how many user groups are registered in the system. You can use the synchronize-user-registry-groups-on-login configuration property to disable this mechanism. In this case, it is recommended to call the group synchronization REST APIat a convenient time to perform the group synchronization manually.
If you do not want to disable the group membership update at login time entirely, you can fine tune its performance by using additional properties described in Optimizing the login time for web applications.
About this task
true
(which is the default), the user registry groups of the current user are refreshed when the user
logs in. To change the value for the setting, you can override the value by adding or updating the
setting in your 100Custom.xml files. For example, to add the setting to a
100Custom.xml file, add the following elements under the
<properties>
element and modify the value as needed:<common>
<security>
<synchronize-user-registry-groups-on-login merge="replace">false</synchronize-user-registry-groups-on-login>
</security>
</common>
For more information about the individual 100Custom.xml
files that need to be updated and their locations, see Location of 100Custom configuration files.Procedure
Make changes to the 100Custom.xml file by following the procedure described at Customizing Business Automation Workflow properties.