Optimizing IdP's performance

[Manuel Haim]

Chad,

thank you for your response and helpful recommendations.

> I *strongly* discourage people from simply creating the DN from given
> input from the user.  It's a very brittle setup and I would remove any
> such suggestion added to the wiki.  If that extra search, done via
> pooled connections, is such a onerous amount of work then the problem
> is with your LDAP.

Well, yes. However, it seems that the SearchDnResolver does not make use
of pooled connections yet. In our setup, this not only impaired the
latency, but also resulted in less logins per second (compared to using
a static DN). Is connection pooling planned here for a future release?

-Manuel