[tfim-cluster:<cluster>] stanzaEdit online This stanza contains definitions for a particular cluster of Federation Runtime servers. basic-auth-userUse the basic-auth-user stanza entry to specify the user name to include in the basic authentication header when WebSEAL communicates with the Federation Runtime.basic-auth-passwdUse the basic-auth-passwd stanza entry to specify the password that WebSEAL includes in the basic authentication header when it communicates with Tivoli Federated Identity Manager.gsk-attr-namehandle-idle-timeouthandle-pool-sizeload-balanceControls the behavior when multiple servers with the same configured priority are available. max-wait-timeUse this entry to control the maximum length of time, in seconds, that the request will block while waiting for a server to become available. serverssl-fips-enabledssl-keyfilessl-keyfile-labelssl-keyfile-stashssl-nist-complianceUse the ssl-nist-compliance stanza entry in the [tfim-cluster:<cluster>] stanza to enable or disable NIST SP800-131A compliance when WebSEAL communicates with the Federation Runtime.ssl-valid-server-dnssl-key-agreementSpecifies the TLS key agreement mode.ssl-extension-supported-groupsSpecifies supported groups for TLS key agreements. This entry is used only when ssl-key-agreement is set to custom.ssl-allow-rsa-key-exchangeUse the ssl-allow-rsa-key-exchange stanza entry to enable or disable the RSA algorithm during TLS key exchange.timeoutParent topic: Stanza reference