IBM Security Verify

 View Only
  • 1.  PD ADMIN Rest API Slow Performance

    Posted Wed September 28, 2022 05:12 AM
    Edited by Narottam Singh Wed September 28, 2022 06:02 AM
    Hi Team 

    we are using the PD admin rest API to fetch all the user from the ISAM system 

    Method : Post
    POST_DATA: { "user_id":"The user id", "user_pwd":"The userpassword", "commands": [
    "user list * 0"
    ] }

    But the API response is very slow ,For Fetching the complete user List of 4 Lakh User , It is taking more than an Hour , Could you please help us with the following 
    1) Is there any way to  improve the performance For example does it support concept like Page Size / Offset 
    2) Is there any alternate approach to fetch all the user from ISAM system 


    ------------------------------
    Narottam Singh
    ------------------------------


  • 2.  RE: PD ADMIN Rest API Slow Performance

    Posted Wed September 28, 2022 06:31 AM

    Narottam,

     

    Unfortunately the pdadmin interface is not the best option when you want to return so many users.  There are no real options which you can use to improve the performance.  You do however have a number of different options, namely:

    1. You can write a Java program which uses the ISVA Direct Registry API to access the user records;
    2. You can go directly to the user registry;
    3. You can use the SCIM API which is provided as a part of the Advanced Access Control offering.

     

    I hope that this helps.

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access

    IBM Master Inventor

    cid4122760825*<a href=image002.png@01D85F83.85516C50">

     

     






  • 3.  RE: PD ADMIN Rest API Slow Performance

    Posted Thu September 29, 2022 12:12 AM
    Hi Scott

    Thanks for quick response , it is very Helpful . I have a follow-up question on the SCIM API , How much performance improvement we can expect via SCIM API , if you have any data or estimates please do share 

    Again thank you very much for your response !



    ------------------------------
    Narottam Singh
    ------------------------------



  • 4.  RE: PD ADMIN Rest API Slow Performance

    Posted Thu September 29, 2022 12:15 AM

    Narottam,

     

    I don't have any data available, but it should perform much better than the pdadmin Web Server.  You also have much greater control over which user records are returned.

     

    I hope that this helps.

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access

    IBM Master Inventor

    cid4122760825*<a href=image002.png@01D85F83.85516C50">

    Phone: 61-7-5552-4008
    E-mail: scotte@au1.ibm.com

    1 Corporate Court
    Bundall, QLD 4217
    Australia

     

     

     






  • 5.  RE: PD ADMIN Rest API Slow Performance

    Posted Thu September 29, 2022 03:13 AM
    Hi Scott 
    Thanks again for quick reply , Could you please confirm whether we can retrieve the GSO cred with SCIM API https://<runtime_listening_address>:<port>/scim/Users



    ------------------------------
    Narottam Singh
    ------------------------------



  • 6.  RE: PD ADMIN Rest API Slow Performance

    Posted Thu September 29, 2022 04:04 PM

    Narottam,

     

    The GSO credentials are not accessible via the SCIM API.

     

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access

    IBM Master Inventor

    cid4122760825*<a href=image002.png@01D85F83.85516C50">

     

     






  • 7.  RE: PD ADMIN Rest API Slow Performance

    Posted Fri November 04, 2022 05:14 AM
    Edited by Narottam Singh Fri November 04, 2022 05:16 AM
    Hi Scott 

    Thanks a lot for your help and pointer , we were able to configure SCIM API and get response on all the endpoints /Users,/Groups ,//Schemas and /ResourceTypes 

    But in User schema /scim/Schemas/urn:ietf:params:scim:schemas:extension:isam:1.0:User we are not able to see any Groups attribute , Also /Users is not returning as the Group assigned to a User which are visible in /Group End point  , Could you please help us confirm whether is this as designed or we are missing something in our configuration .

    Regards
    ------------------------------
    Narottam Singh
    ------------------------------