Configuring Identity Manager timeout settings

Products

CA Identity Manager CA Identity Governance CA Identity Portal SITEMINDER

Issue/Introduction

Question:

How are the time-outs configured?
Are there any recommendations for timeout settings?
If so, where can we find these?

Answer:

The default timeout settings are generally satisfactory unless you are experiencing a specific timeout issue. Below are the time-outs that can be set in IM and the IM .ear file.

Search Timeout
------------------
The maximum number of seconds that Identity Manager searches a directory before terminating the search. This setting is, by default, managed by SiteMinder and can be set in the the SiteMinder GUI (if used). It can also be set in the IME's directory.xml file...

<DirectorySearch timeout="<number of seconds>">

When set to 0 seconds, the SiteMinder Policy server setting applies. Values greater than 0 override the Siteminder setting.
For more detailed information, please review the configuration guide > LDAP User Store Management

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-4/configuring/ldap-user-store-management/improve-directory-search-performance.html

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-4/configuring/ldap-user-store-management/directory-search-parameters.html

Job Timeout
--------------
The amount of time that Identity Manager waits after a task is submitted before displaying a status message.

If the task completes within the specified amount of time, Identity Manager displays a message indicating that the task is complete or has been submitted for processing.

If the task takes longer to complete or is under workflow control, Identity Manager displays a message indicating that the task has been submitted for processing or is pending.

Environment

Release:
Component: IDMGR

Resolution

The Job Timeout setting is configured in the Management Console under the IME > Advanced Settings > User Console.

IM UI Session timeout
----------------------------
This is the idle timeout for the IM tasks; the number of minutes before session is expired and user is prompted to enter their credentials. The default is 30 minutes.

The setting is in web.xml under..

...\iam_im.ear\user_console_war\WEB-INF

<session-config>
      
      <session-timeout>30</session-timeout>
    </session-config>

Management Console Session timeout
----------------------------
This is the idle timeout for the Management Console, assuming authentication has been configured during installation; the number of minutes before session is expired and user is prompted to enter their credentials. The default is 30 minutes.

The setting is in web.xml under..

...\iam_im.ear\management_console.war\WEB-INF

    <session-config>
      <session-timeout>30</session-timeout>
    </session-config>