attribute resolver behavior

[Chad La Joie]

On Thu, Aug 30, 2012 at 11:42 AM, Christopher Bongaarts <cab at umn.edu> wrote:
> If you use a lot of Script attributes, you might start to feel more impact.

It's unlikely that you will.  Unless you've changed the default
scripting language, all those scripts are compiled at IdP startup and
run at native Java code speed.

> Basically, it all depends on your attribute definitions and data connectors.

Attribute resolution is *very* rarely the bottleneck for the IdP (it's
usually crypto).  It can be if your data sources have very poor
response characteristics (i.e., very high latency or very low
availability) but for most sites that's not really the case.

So, as with any other system, the best thing to do is load test the
IdP, with your expected resolver configuration, and see how it
performs.  See if the resolver is actually slow, see if your data
sources buckle under the load, etc.

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered