increase number records being provisioned SAP Identity Management 8.0

[gowri_rabendran]

Hi,

I was wondering if it is possible for the number of records provisioned within a task? At the moment in the Exec Plugin - Assign User Membership I can see that it only ever process around 200-300 records max each time even though I have around say 10000 pending assignments.

Is it possible for it to process more records in a single call than splitting it? I have tried playing around with the dispatcher settings to see if more threads can be loaded in a single call but doesn't seem to make a difference.

Regards,

Gowri

[ivan_petrov · Accepted solution]

Hi Gowri,

Well in this case the answer is not so trivial.

Basically there is a limitation of 1000 of assignments processed per batch and it is hardcoded.

Why you achieve only 200-300 per user is, because you either assign roles to more than one user, or if you are working only with one user, then the you have assigned roles in more than one system.

Theoretically the number of assignments can reach 1000 in one batch, but in practice this is impossible, there are too many variables to handle (like network speed, processor speed, RAM amount, DB load, etc.)

So to change that you can try playing not with IDM itself, but the variables I mentioned.

From other point of view limitation of 1000 assignments per batch can be changed, but it is not recommended, because it will affect the whole IDM behavior.

Regards,

Ivan

[gowri_rabendran · Accepted solution]

Hi Ivan,

Thank you for your response.

I assumed as much but wanted to see if there was something I could of done to increase performance. I have found performance tweaks on the server didn't give us a cost benefit to performance uplift achieved.

Also even with grouping enabled for assignments, I found it makes per role assignment call rather than per user and apply the pending role assignments in one go. Unless you are aware of any configuration that would enable this.

Regards,

Gowri

[ivan_petrov · Accepted solution]

Hi Gowri,

As you correctly stated the query is over the all assignments and it is not limited per user in order to find a better performance.

If the query is ordering the assignments per user, then it will be much slower.

Regards,

Ivan

[AndreeaUrsu · Accepted solution]

Hi Ivan- what about if I want to synch display name from IDM to AAD for 80k users?can I increase the number of assignments for more than 1000? Thanks.