Credential Service Cache

server/credential_service_cache

Specifies the configuration for the credential service cache. When the cache is enabled, IAG will cache the encrypted credentials received from the external credential service. If the cache is not enabled, IAG will request credentials from the credential service for every request requiring single sign-on.

Properties

NameTypeConstraintsDescription
cache_enabledbooleanValues: true or false

Default value: false
A boolean to indicate whether the credential service cache is enabled or not.
cache_sizenumberMinimum: 0

Maximum: unlimited

Default value: 1024
The cache size, the number of entries which will be cached.
entry_lifetimenumberMinimum: 0

Maximum: unlimited

Default value: 900
The entry lifetime, the maximum number of seconds entries will be cached for, regardless of whether they are being used or not.
entry_idle_timeoutnumberMinimum: 0

Maximum: unlimited

Default value: 900
The entry idle timeout, the number of seconds a cache entry which is not being used will remain cached for.
login_clear_userbooleanValues: true or false

Default value: false
If set to true, on successful authentication any existing cached credentials for the authenticating user will be cleared.

Example

server:
  credential_service_cache:
    cache_enabled: true
    cach_size: 2048
    entry_lifetime: 3600
    entry_idle_timeout: 3600
    login_clear_user: true

Did this page help you?