Hello Team, 

I'm facing issue with larger attributes in iv-creds. When user login it takes time (3-5 mins) and gives time out error. We have some custom attributes in ISIM which have 100's to 1000's value in the attribute. My idea is to skip them and get the user login. Can I split iv-creds so I can only user few attributes for user login? 

I was also trying this approach, remove iv-creds at junction (/mga) and get the user to login but it skips mobile number for the user. Is there any way I can pass mobile number or any specific attribute to /mga junction and disable iv-creds? 



​

------------------------------
Sheetal
------------------------------

Hi Sheetal, You could use a couple of options here. 

Option1: To your question, you can split the iv-cred into chunks by setting max-webseal-header-size under [junction] parameter.

Here is the link to documentation 

https://www.ibm.com/docs/en/sva/7.0.0?topic=SSPREK_7.0.0/com.ibm.isam.doc_80/ameb_webseal_guide/task/tsk_lim_size_ws_gen_http_hdr.html

Option 2: You could only send the desired attributes to backend application by leveraging the HTTP-Tag-Value header option to just send the mobile number.

Here is the link to Inserting user session data into HTTP headers

https://www.ibm.com/docs/en/samfm/8.0.1?topic=servers-inserting-user-session-data-into-http-headers

Hope this helps.

Regards,
Rama

------------------------------
Rama Yenumula
------------------------------