Performance Tuning for IBM Security Access Manager client on WebSphere DataPower SOA Appliance

Specifically, caching of registry searches is not enabled. This feature represents the largest performance improvement that is available.

When Security Access Manager authenticates or authorizes a user, it must perform several searches against the registry server in the Tivoli Access Manager (server) environment. When registry-caching is not enabled, these searches must be performed on each operation. Because each search is an external network operation, a performance penalty is incurred, which significantly increases the load on the registry server.

The Security Access Manager configuration file contains a parameter that enables caching of registry search results. When enabled, there are additional parameters to control the number of users or groups that the client will cache and the length of time a cached entry is valid.

Additionally, you can define configuration entries that direct the Security Access Manager client to ignore irrelevant registry suffixes.

For both improved performance and high availability, define registry server replica. These definitions include preference indicators to distribute load across multiple registry servers.