IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  larger iv-creds

    Posted Wed April 06, 2022 02:08 PM
    Hello Team, 

    I'm facing issue with larger attributes in iv-creds. When user login it takes time (3-5 mins) and gives time out error. We have some custom attributes in ISIM which have 100's to 1000's value in the attribute. My idea is to skip them and get the user login. Can I split iv-creds so I can only user few attributes for user login? 

    I was also trying this approach, remove iv-creds at junction (/mga) and get the user to login but it skips mobile number for the user. Is there any way I can pass mobile number or any specific attribute to /mga junction and disable iv-creds? 



    ​

    ------------------------------
    Sheetal
    ------------------------------


  • 2.  RE: larger iv-creds

    Posted Wed April 06, 2022 02:21 PM

    Hi Sheetal, You could use a couple of options here. 

    Option1: To your question, you can split the iv-cred into chunks by setting max-webseal-header-size under [junction] parameter.

    Here is the link to documentation 

    https://www.ibm.com/docs/en/sva/7.0.0?topic=SSPREK_7.0.0/com.ibm.isam.doc_80/ameb_webseal_guide/task/tsk_lim_size_ws_gen_http_hdr.html


    Option 2: You could only send the desired attributes to backend application by leveraging the HTTP-Tag-Value header option to just send the mobile number.

    Here is the link to Inserting user session data into HTTP headers

    https://www.ibm.com/docs/en/samfm/8.0.1?topic=servers-inserting-user-session-data-into-http-headers

    Hope this helps.

    Regards,
    Rama



    ------------------------------
    Rama Yenumula
    ------------------------------

    Original Message


Related Content