Credential Service Cache

server/credential_service_cache

Specifies the configuration for the credential service cache. When the cache is enabled, IAG will cache the encrypted credentials received from the external credential service. If the cache is not enabled, IAG will request credentials from the credential service for every request requiring single sign-on.

Properties

Name	Type	Constraints	Description
cache_enabled	boolean	Values: `true` or `false` Default value: `false`	A boolean to indicate whether the credential service cache is enabled or not.
cache_size	number	Minimum: `0` Maximum: `unlimited` Default value: `1024`	The cache size, the number of entries which will be cached.
entry_lifetime	number	Minimum: `0` Maximum: `unlimited` Default value: `900`	The entry lifetime, the maximum number of seconds entries will be cached for, regardless of whether they are being used or not.
entry_idle_timeout	number	Minimum: `0` Maximum: `unlimited` Default value: `900`	The entry idle timeout, the number of seconds a cache entry which is not being used will remain cached for.
login_clear_user	boolean	Values: `true` or `false` Default value: `false`	If set to true, on successful authentication any existing cached credentials for the authenticating user will be cleared.

Example

server:
  credential_service_cache:
    cache_enabled: true
    cach_size: 2048
    entry_lifetime: 3600
    entry_idle_timeout: 3600
    login_clear_user: true