<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#0070C0;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'>Hello Nate / </span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'>Christopher,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'>We are using SSO toolkit for authentication of users, thus can’t comment on the no. of logins per second when it comes to Shib IDP.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'>Is there a tool that can help to provide a dummy calculation based on no. of users to be 6,00,000?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'>Dematri<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#0070C0'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net] <b>On Behalf Of </b>Nate Klingenstein<br><b>Sent:</b> Saturday, June 8, 2013 2:17 AM<br><b>To:</b> Shib Users<br><b>Subject:</b> Re: No. of Shibboleth servers required for 6, 00, 000 users to authenticate.<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><span class=apple-style-span><b><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>What to Watch For</span></b></span><o:p></o:p></p></div><p style='margin-bottom:7.5pt;line-height:12.75pt;background:white;orphans: 2;widows: 2;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px;z-index:auto'><span class=apple-style-span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#333333;background:white'>CPU load is primarily determined by the number of logins per second your IdP will experience at peak load due to the cryptography of signing and encrypting assertions. Latency, when there is enough CPU, will be heavily influenced by the response time of the data sources that the IdP communicates with when authenticating users and acquiring attributes. RAM consumption is primarily determined by the number of concurrent login sessions each IdP node will keep, which is itself a function of <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPStatelessClustering"><span style='color:#3260BA'>session storage and replication choices</span></a>, followed by logins per second and session duration. Total user base size tends to be an issue for upstream data sources to worry about and not a primary factor for load on the IdP.</span></span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#333333'><o:p></o:p></span></p><p style='margin-bottom:7.5pt;line-height:12.75pt;background:white;orphans: 2;widows: 2;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px;z-index:auto'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#333333'>CPU load is the principal bottleneck in most IdP deployments.<o:p></o:p></span></p><div><p class=MsoNormal>Please do amend if you have any changes.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPProdLoadTestResults">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPProdLoadTestResults</a> <o:p></o:p></p></div></body></html>