Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in Oracle Access Manager?

• Product and Component Name Changes
• Tuning the Directory
• Tuning the Access Server
• Tuning Workflows
• Tuning Your Network
• Failover and Load Balancing
• Reconfiguring Oracle Access Manager

1 Capacity Planning

• 1.1 About Capacity Planning
• 1.2 Estimating Peak Load
  • 1.2.1 General Guidelines for Estimating Peak Load
  • 1.2.2 Complex Estimates of Peak Load
  • 1.2.3 Predictions of Concurrency and Throughput
• 1.3 Capacity Planning for Multiple Environments
• 1.4 Example from an Actual Deployment

2 Performance Tuning

• 2.1 Guidelines for Directory Tuning
  • 2.1.1 Check the Performance of the Directory
  • 2.1.2 Directory Connection Pool Size
    • 2.1.2.1 Differences Between Configured and Actual Connection Pool Size
    • 2.1.2.2 Configuring the Connection Pool
  • 2.1.3 Storing Workflow Tickets in the Directory
    • 2.1.3.1 Writing Workflow Tickets to the Directory
  • 2.1.4 Indexing Attributes in the Directory
    • 2.1.4.1 Limitations of Indexing
    • 2.1.4.2 Indexing and User Deactivation
    • 2.1.4.3 Indexing and Workflows
    • 2.1.4.4 Indexing and Groups
    • 2.1.4.5 Indexing and Search Constraints
  • 2.1.5 Changing the Number of Access Server-to-Directory Server Connections
  • 2.1.6 Deleting and Archiving Workflows
  • 2.1.7 Setting Read and Write Permissions for Administrators
  • 2.1.8 Configuring the Searchbase
    • 2.1.8.1 Setting a Searchbase Filter
  • 2.1.9 Applying Search Constraints
  • 2.1.10 Increasing Connections to the Directory in the Identity System
  • 2.1.11 Changing Directory Content
    • 2.1.11.1 Ordering the Columns in a Search Results List
    • 2.1.11.2 Changing the Bind DN
  • 2.1.12 Adjusting Cache Settings
  • 2.1.13 Deleting ObSyncRecord Entries from the Directory---assess for other changes
• 2.2 LDAP Tools
  • 2.2.1 Viewing Directory Content in LDIF Files
    • 2.2.1.1 LDAPSEARCH Command-Line Format
    • 2.2.1.2 LDAPSEARCH Command-Line Parameters
    • 2.2.1.3 LDAPSEARCH Examples
  • 2.2.2 Changing Directory Content with LDAPMODIFY
    • 2.2.2.1 LDAPMODIFY Command-Line Format
    • 2.2.2.2 LDAPMODIFY Command-Line Parameters
    • 2.2.2.3 LDAPMODIFY Examples
• 2.3 Access Server Performance Tuning
  • 2.3.1 Configuring Password Validation by the Access Server
    • 2.3.1.1 The ObCredValidationByAS Parameter
  • 2.3.2 Changing the Number of Request Queues and Threads
    • 2.3.2.1 About Threads and Queues
    • 2.3.2.2 Estimating the Current Number of Threads
    • 2.3.2.3 Estimating the Required Number of Threads and Queues
  • 2.3.3 Performance Considerations when Using ObMyGroups
  • 2.3.4 Limiting the Number of Authorization Queries from WebGate
• 2.4 Tuning the Caches
  • 2.4.1 Tuning the Policy Cache
    • 2.4.1.1 Calculating Maximum Elements in a Policy Cache
    • 2.4.1.2 Calculating Memory Requirements for the Policy Cache Elements
    • 2.4.1.3 Calculating Policy Cache Timeout
  • 2.4.2 User Cache Tuning
    • 2.4.2.1 Calculating the User Cache Timeout
    • 2.4.2.2 Calculating Maximum Elements in the User Cache
    • 2.4.2.3 Calculating Memory Requirements for User Caches
  • 2.4.3 Tuning the URL Prefix Cache
  • 2.4.4 WebGate Cache Tuning
  • 2.4.5 Sizing the Maximum Elements in Cache
• 2.5 Tuning the Identity System
• 2.6 Tuning the Group Manager
  • 2.6.1 Tuning the My Groups Page
  • 2.6.2 Tuning the View Members Page
  • 2.6.3 Tuning the Group Expansion Page
• 2.7 Tuning Workflows
  • 2.7.1 Tuning workflowdbparams.xml
  • 2.7.2 Configuring Workflow Search Parameters
• 2.8 Tuning Your Network
  • 2.8.1 Be Sure Your Machines Are Working Properly
• 2.9 Resource-Intensive Operations
  • 2.9.1 Login Forms
  • 2.9.2 Password Management
  • 2.9.3 Plug-Ins

3 Failover and Load Balancing

• 3.1 About Load Balancing with Oracle Access Manager
  • 3.1.1 About Load Balancing of LDAP Data
• 3.2 Configuring Load Balancing for Web Components
  • 3.2.1 Configuring Simple Round-Robin Load Balancing
  • 3.2.2 Configuring Weighted Round-Robin Load Balancing
• 3.3 Configuring Load Balancing among Oracle Access Manager and Directory Servers
  • 3.3.1 Configuring Load Balancing for User Data
  • 3.3.2 Configuring Load Balancing of Configuration & Policy Data
  • 3.3.3 Adjusting Connection Pooling for a Directory Server Instance
• 3.4 About Failover with Oracle Access Manager
  • 3.4.1 Primary Versus Secondary Servers
• 3.5 Setting the Polling Interval
• 3.6 Configuring Failover of Web Components
• 3.7 About Failover Between Oracle Access Manager and Directory Servers
• 3.8 Configuring Directory Failover for User Data
• 3.9 Configuring Directory Failover for Configuration and Policy Data
  • 3.9.1 Configuring Identity Server Failover for Configuration Data
  • 3.9.2 Configuring Access Server Directory Failover for Configuration and Policy Data

4 Caching and Cloning

• 4.1 Cloned and Synchronized Components
• 4.2 About Caching Recent Information
  • 4.2.1 Triggering Cache Flush Events
  • 4.2.2 Cache Timeout
• 4.3 Caching System Information
  • 4.3.1 Caching Group Objects
  • 4.3.2 Turning Off the Credential Mapping Cache
• 4.4 Caching Access System Information
  • 4.4.1 Access Server Cache Configuration
    • 4.4.1.1 Information in a Policy Cache
    • 4.4.1.2 Caching User Information
  • 4.4.2 Automatically Flushing Access Server Caches
  • 4.4.3 Manually Flushing Access Server Caches
  • 4.4.4 Cache Configuration Using Replicated Directories
    • 4.4.4.1 Timeouts That Ensure Correct Behavior
  • 4.4.5 AccessGate Cache Configuration

5 Reconfiguring the System

• 5.1 What Can Be Reconfigured
• 5.2 Performing the Reconfiguration

6 Synchronizing System Clocks Across Time Zones

• 6.1 About Synchronization
• 6.2 Synchronization With NTP
• 6.3 Synchronization with a GPS-based System

Index