ECID Support for LDAP Connections

Additional Server Configuration 6-9 To enable and set the wait time for the User HTTP Session State replication setting for Oracle Identity Federation, enter the WLST script environment for Oracle Identity Federation and set the following properties: ■ To configure Oracle Identity Federation to wait for the session state to be replicated, set the sessionreplicationenabled boolean property from the serverconfig group to true, otherwise set it to false: setConfigPropertyserverconfig, sessionreplicationenabled, true, boolean ■ Set the sessionreplicationtimeout long property from the serverconfig group to the wait time in milliseconds, for example: setConfigPropertyserverconfig, sessionreplicationtimeout, 2000, long

6.5 Additional RDBMS Configuration

This section contains additional topics for RDBMS configuration for Oracle Identity Federation: ■ Configuring RDBMS Session Cache ■ Configuring RDBMS Data Compression

6.5.1 Configuring RDBMS Session Cache

When Oracle Identity Federation is using an RDBMS to store the user session objects, the server uses a caching mechanism to improve performance at runtime: the server keeps a reference to recently used session objects in memory to avoid read access to the database. You can configure the maximum number of session entries in the cache, and the maximum time the session is present in the cache before it is cleared. By default, Oracle Identity Federation server caches a maximum of 25,000 session entries, for a maximum time of 300 seconds It is important to set an optimal timeout, especially in cluster mode where the session can be destroyed by another Oracle Identity Federation server if: ■ a load balancer is used without sticky sessions ■ SOAP Logout is enabled To set maximum number of entries and the timeout settings for Oracle Identity Federation, enter the WLST script environment for Oracle Identity Federation and set the properties as in the following examples: ■ Set the transientrdbmssessioncachesize long property from the datastore group to the maximum entries: setConfigPropertydatastore, transientrdbmssessioncachesize, 25000, long ■ Set the transientrdbmssessioncachetimeout long property from the datastore group to the cache timeout in seconds: Note: This is a critical feature, since a given users session is accessed multiple times when performing an SSO operation.