Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

In case of user attribute changes, does Access Manager maintain the caches and notify the Policy Agent?

April 26, 2017caches Case changes maintain manager notify policy user

0

Posted

In case of user attribute changes, does Access Manager maintain the caches and notify the Policy Agent?

1 Answer

0

Posted

Because of the persistent searches in Sun Java System Directory Server by Access Manager, irrespective of what plug-ins you configure for the user data store (Access Manager SDK or LDAPv3), Access Manager caches are in sync. User-profile attributes sent to the Policy Agent, except those sent by the policy’s Response Provider plug-in, are not cached by the policy engine. Those sent by the plug-in are cached on the policy server up to the SubjectsResultTtl duration defined in the policy configuration service. Consequently, dynamic response attributes that are sent in a policy response to the client could be out of sync with the user attributes in the directory server up to the duration specified in the SubjectsResultTtl parameter.