12.4 Viewing Performance in Fusion Middleware Control

Fusion Middleware Control provides various performance metrics for administrators.

The following sections provide more details:

• Performance Overview Pages in Fusion Middleware Control

• Metrics Palette and the Performance Summary Page

• Displaying Performance Metrics in Fusion Middleware Control

• Displaying Component-Specific Performance Details

• Resulting Pages for Selected Nodes and Targets

12.4.1 Resulting Pages for Selected Nodes and Targets

Using Fusion Middleware Control, you can view performance metrics for live sessions in a variety of formats.

Fusion Middleware Control provides Administrators with:

• A cluster-wide view of performance for Access Manager with Security Token Service

• A per-server drill-down of key performance metrics

• The ability to quickly add or remove performance metrics

Table 12-2 summarizes the pages for selected nodes and target instances.

Table 12-2 Resulting Pages for Selected Nodes and Targets

Node	Target	Information Summary Page	Performance Overview	Performance Summary w/Metrics
Application Deployment Internal Applications	...AdminServer oamsso_logout(11.1.1.3.0) AdminServer oamsso_logout(11.1.1.3.0) oam_server	Yes Yes Yes	No No No	Yes Yes Yes
WebLogic Server domain	oam_bd (Cluster name) AdminServer oam_server	Yes Yes Yes	No No No	No Yes Yes
Identity and Access	OAM (Cluster) oam_server (Server)	No No	Yes Yes	Yes Yes

Note:

Security Token Service performance is included with relevant OAM Cluster and Server pages.

12.4.2 Performance Overview Pages in Fusion Middleware Control

The Fusion Middleware Control Performance Overview can be used to reflect WebLogic cluster information down to specific performance metrics for individual Cluster and Server targets.

Cluster Page: The top node within Identity and Access leads to a page for the OAM Cluster Deployment, which includes a Performance Overview. For Figure 12-8, the Cluster is selected in the navigation tree, beneath the Identity and Access node. Figure 12-8 illustrates the Cluster Deployments and Performance Overview sections. This page includes a table for Token Issuance and Token Validations.

Figure 12-8 Cluster Page

Description of "Figure 12-8 Cluster Page "

OAM Server Pages: Selecting an OAM Server target name from the navigation tree (or the open page), displays a Performance Overview for the target. At the top of the OAM Server page, a summary of Key Metrics for the server instances appears instead of the Cluster Deployment section. Figure 12-9 illustrates the OAM Server instance Key Metrics, which include Token Issuance and Token Validations per second. The Token Validation success rate is included.

Figure 12-9 Key Metrics for Server Page

Description of "Figure 12-9 Key Metrics for Server Page "

Table 12-3 describes the elements of the Performance Overview for Clusters and OAM Server instances in Fusion Middleware Control. There are only a few differences.

Table 12-3 Summary of Performance Overviews in Fusion Middleware Control

Section or Column Name	Description
Cluster Menu	Dynamic context menus provide functions related to the selected target (also available when you right-click a target in the navigation tree). This menu is available for the selected Cluster. Description of the illustration GUID-09B02B55-EBF3-405C-9984-3BEE65C97161-default.gif The Component Performance command enables you to choose between displaying Access Manager or Security Token Service metrics. See Also: "Access Manager Component Pages" and "Security Token Service Component Pages".
Deployments, OAM Cluster pages	This section appears only on OAM Cluster pages. It describes the status of each instance in the cluster. The following information is included: Instance Name Status Authentications Authorizations
Instance Name	This column includes the name of each OAM Server instance in the cluster. For example: OAM_server_name
Status	This column identifies the status of each OAM Server instance in the cluster with either a: Green Up Arrow (running) Red Down Arrow (not running)
Authentications	Authentications columns identify: Authentications/sec: The number of authentications per second for each OAM Server instance in the cluster Success Rate (% of Authentications Successful): A numeric value representing the percentage of successful authentications for each OAM Server instance in the cluster
Authorizations	This column identifies the number of authorizations per second for each OAM Server instance in the cluster. Authorizations columns identify: Authorizations/sec: The number of authorizations per second for each OAM Server instance in the cluster Success Rate (% of Authorizations Successful): A numeric value representing the percentage of successful authorizations for each OAM Server instance in the cluster
Server Instance Menu	Dynamic context menus provide functions related to the selected target (also available when you right-click a target in the navigation tree). This menu is available for the selected server instance. Description of the illustration GUID-EECB7F18-FA1A-4873-A3F5-4B372386A7EA-default.gif The Component Performance command enables you to choose between displaying specific Access Manager or Security Token Service metrics. See Also: "Access Manager Component Pages" and "Security Token Service Component Pages".
Key Metrics, OAM Server Page	This table provides a summary of statistics for only the selected OAM Server instance. Key metrics include details for both Access Manager and Security Token Service: Authentications/sec, Average Authentication Latency (ms), and Success ratio Authorizations/sec, Average Authorization Latency (ms), and Success ratio Token Issuances/sec, Average Issuance Latency (ms), and Success ratio Token Validations/sec, Average Validation Latency (ms), and Success ratio
Performance Overview, OAM Cluster and OAM Server Pages	This section provides a graphic representations of Access Manager authentication and authorization operations and Security Token Service Token Issuance and Token Validation operations. Metrics in the Performance Overview are not configurable. The Metrics Palette is available for only the Performance Summary. Whether you have an OAM Cluster or OAM Server instance selected, the Performance Overview includes: Authentications/sec and Authorizations/sec Token Issuances/sec and Token Validations/sec Within each table: Coordinates along the horizontal axis (the x axis) identify the time period. Coordinates along the vertical axis (the y axis) identify the number of named transactions that occured during the time period.
Table View	Click the Table View link on the bottom-right side of the Performance Overview to display performance information in columns within a pop up window.
LDAP Servers, OAM Cluster and OAM Server Pages	This section is available when either an OAM Cluster or a single OAM Server instance is selected. It provides information for the default LDAP user identity store: LDAP operations/sec LDAP Latency (milliseconds) LDAP Success Rate
Application Domains, OAM Cluster and OAM Server Pages	This section of the OAM Cluster and OAM Server pages provides information for all Application Domains that were used during authentication and authorization processing. Columns in this section provide the: Application Domain Name: Each Application Domain that contains the authentication and authorization policies used for a request. Authentications/sec, Authentications Latency (ms), Success Ratio (%) for each Application Domain Authorizations/sec, Authorization Latency (ms), Success Ratio (%) for each Application Domain

12.4.2.1 Access Manager Component Pages

The Component Performance command on both the Cluster and Server instance menus enables you to display Access Manager-specific metrics.

Description of the illustration GUID-BB38E455-47B0-4F37-8A29-AE6D16F45564-default.gif

Cluster component-specific metrics are aggregated across the cluster, illustrated in Figure 12-10. Details follow in Table 12-4.

Figure 12-10 Aggregated Access Manager Component Metrics for the Cluster

Description of "Figure 12-10 Aggregated Access Manager Component Metrics for the Cluster"

Figure 12-11 illustrates the Access Manager component metrics for a single OAM Server instance.

Figure 12-11 Access Manager Component Metrics for a Single OAM Server Instance

Description of "Figure 12-11 Access Manager Component Metrics for a Single OAM Server Instance"

Table 12-4 describes the component-specific metrics for Access Manager.

Table 12-4 Access Manager Component Metrics

Access Manager Metrics	Description
Access Manager Clients	Based on your selection (Cluster or Server instance), this page provides information for all active Access Clients in a cluster (or for the active Access Clients of an individual OAM Server). Details include: Client ID Type Authentications Authorizations
Client ID	Displays the name of the Agent, as defined in the Agent registration in the Oracle Access Management Console. For example: IAMSuiteAgent
Type	Displays the Agent. type For example: OAM Webgate
Authentications	Authentications columns identify: Authentications/sec: The number of authentications per second for each OAM Server instance in the cluster Latency (ms): The number of milliseconds the authentication was delayed Success Rate (% ): A numeric value representing the percentage of successful authentications for each OAM Server instance in the cluster
Authorizations	Authorizations columns identify: Authorizations/sec: The number of authorizations per second for each OAM Server instance in the cluster Latency (ms): The number of milliseconds the authorization was delayed Success Rate (%): A numeric value representing the percentage of successful authorizations for each OAM Server instance in the cluster

12.4.2.2 Security Token Service Component Pages

The Component Performance command on both the Cluster and Server instance menus enables you to display Security Token Service component-specific metrics.

Description of the illustration GUID-BB38E455-47B0-4F37-8A29-AE6D16F45564-default.gif

Component-specific metrics are aggregated for the Cluster, as illustrated in Figure 12-10.

Figure 12-12 Aggregated STS Component Metrics for the Cluster

Description of "Figure 12-12 Aggregated STS Component Metrics for the Cluster"

For each individual server instance, STS component-specific metrics are also available, as illustrated in Figure 12-10.

Figure 12-13 STS Component Metrics for an Individual OAM Server Instance

Description of "Figure 12-13 STS Component Metrics for an Individual OAM Server Instance"

Table 12-5 introduces the STS component specific metrics.

Table 12-5 STS Component-Specific Metrics

Security Token Service Metrics	Description
Requestor Partners	Statistics summary for either the selected OAM Server instance (or an aggregated summary for the Cluster): Partner ID Token Issuances Token Validations Selecting a Requestor Partner ID reveals Relying Party Details with specific information for only the named partner.
Token Operations	Metrics for STS Token Operations include: Token Type Token Issuances: Total Requests, Requests per second, Average Issuance Latency (ms) Token Validations: Total Requests, Requests per second, Average Issuance Latency (ms)

12.4.3 Metrics Palette and the Performance Summary Page

The Performance Summary command on the Cluster or Server menu displays metrics charts for the selected target.

Figure 12-14 Performance Summary Command

Description of "Figure 12-14 Performance Summary Command"

On the Performance Summary page, a chart is displayed for each selected metric. An OAM Server Performance Summary page. Figure 12-15 shows the Performance Summary page with an open Metric Palette from which you can choose metrics to chart. Stacked charts allow you to easily compare multiple metrics for the same time frame, change the time frame to go back in time, or zoom in or out.

Figure 12-15 Performance Summary Page with Metric Palette

Description of "Figure 12-15 Performance Summary Page with Metric Palette "

Table 12-6 describes the status and controls available on the Performance Summary page.

Table 12-6 Status and Controls on Performance Summary Pages

Status or Control	Description
Past n minutes	Status is based on the specified time period, which can be adjusted using the slider.
All
n Minutes	The specified time period, which can be adjusted using the slider.
Slider	The tool you use to adjust the time period. Description of the illustration GUID-E40C1D48-90B0-4B04-AD62-8B9937C89048-default.gif
Chart Set	A list from which you can choose the set of saved charts to view.
View	A menu that enables you to add a grid, save a chart, and order information on the page. Description of the illustration GUID-BF244E6D-28F6-4787-B96C-70BB809B0649-default.gif
Overlay	A menu that enables you to search for and view another instance of the same type and compare this against the instance in the summary. Description of the illustration GUID-5FB4B9E5-7379-446C-8922-81F53C7D50D6-default.gif
Metric Palette	A listing from which you can select performance metrics to chart. Items unique to Access Manager and Security Token Service are shown here. Left: Metric Palette for the Cluster Right: Metric Palette for a Single OAM Server Description of the illustration GUID-0C3D0981-ABC2-4947-9CC7-578E1C694078-default.gif

12.4.4 Displaying Performance Metrics in Fusion Middleware Control

Fusion Middleware Control Administrators can add or change the metrics that are displayed in the Performance Summary.

See Also:

• "Performance Overview Pages in Fusion Middleware Control"

• "Metrics Palette and the Performance Summary Page"

1. Log in as described in "Logging In To Fusion Middleware Control".

2. Performance Overview:

   1. Expand the desired node and select a target. For example: Identity and Access.

      • Identity and Access
      • oam_server

   2. Review the Performance Overview.

3. Performance Summary:

   1. Select a target (Step 1).

   2. From the context menu, select Performance Summary.

   3. Review the Summary Page.

4. Changing Metrics:

   1. From the Performance Summary page (Step 2), click the Show Metrics Palette button.

   2. From the Metrics Palette, expand nodes and check (or clear) boxes to add (or remove) metrics from the summary.

   3. Review the updated the Summary page.

   4. Click Hide Metrics Palette when you finish.

5. Saving a Chart Set:

   1. From the View menu on the Performance Summary page, click Save Chart Set.

   2. In the dialog box that appears, enter a unique name for this chart set and click OK when the operation is confirmed.

   3. Click Hide Metrics Palette when you finish.

   4. Review the updated information on the Summary Page.

6. Adding an Overlay, Access Manager:

   1. From the Overlay menu on the Performance Summary page, click Another Oracle Access Manager.

   2. In the Search and Select Targets dialog, enter the target name and host name, then click Go.

   3. In the target results table, click the name of the desired target and then Select.

   4. When finished viewing the overlay, click Remove Overlay from the Overlay menu.

7. Adding an Overlay, Today with Yesterday:

   1. From the Overlay menu on the Performance Summary page, click Today with Yesterday.

   2. When finished viewing the overlay, click Remove Overlay from the Overlay menu.

8. Testing:

   1. Using the Access Tester, perform several authentication and authorization tests (see Validating Connectivity and Policies Using the Access Tester).

   2. In Fusion Middleware Control, check performance metrics.

12.4.5 Displaying Component-Specific Performance Details

Fusion Middleware Control Administrators can use the following procedure to view and compare component-specific performance data.

See Also:

• "Access Manager Component Pages"

• "Security Token Service Component Pages"

1. Log in as described in "Logging In To Fusion Middleware Control".

2. Expand the desired node and select a target. For example:

   • Identity and Access
   • oam_server

3. From the context menu, select Component Performance.

4. Choose Access Manager (or Security Token Service).

5. STS Partner ID: Choose a Partner ID in the Security Token Service results table for more details, if needed.

6. Component Performance:

   1. From the context menu, select Component Performance.

   2. Choose either Access Manager (or Security Token Service).

   3. Choose an item in the results table to get more details, if available.

7. Testing:

   1. Using the Access Tester, perform several authentication and authorization tests (see Validating Connectivity and Policies Using the Access Tester).

   2. In Fusion Middleware Control, check performance metrics.