Setting rate limit on VMware Identity Manager 3.3.7

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

The purpose of this article is to understand how to set rate limit on VMware Identity manager appliances.

Environment

VMware Identity Manager 3.3.7

Resolution

Steps to configure rate limiting using cURL on VMware Identity Manager (vIDM):

1. Log in to VMware Identity Manager in a browser using a local admin account.

2. Retrieve the HZN cookie:

   • Open Developer Tools in your browser.

   • Navigate to Application → Cookies and copy the HZN cookie value.

3. Verify current rate limit settings:
   Run the following cURL command to check existing limits:

   curl -k -X GET "https://<VIDM_FQDN>/SAAS/jersey/manager/api/system/tuning/resiliency/tenant/orgResiliencyConfiguration?tenantId=<TENANT_NAME>" -H "Authorization: HZN <HZN_cookie_from_step_2>" -H "Content-Type: application/json"

4. Update rate limit for system domain users:

   Use this cURL command to set your desired limits:

   curl -k -X PUT   "https://<VIDM_FQDN>/SAAS/jersey/manager/api/system/tuning/resiliency/tenant/orgResiliencyConfiguration?tenantId=<TENANT_NAME>" -H "Authorization: HZN <HZN cookie obtained in Step 2>" -d '{     "config": {
          "rateLimitingDisabled": false,
          "rateLimits": {
            "login": {
              "requestsPerMinute": <Desired limit>
            },
            "launch": {
              "requestsPerMinute": <Desired limit>
            },
            "ws-fed": {
              "requestsPerMinute": <Desired limit>
            }
          }
        }
      }'  -H "Content-Type: application/vnd.vmware.horizon.manager.system.tuning.resiliency.config+json;charset=UTF-8" -H "Accept application/vnd.vmware.horizon.manager.system.tuning.resiliency.config+json"

    

5. Update rate limit for Active Directory domain users:
   Run this command:

   curl -k -X PUT "https://<VIDM-FQDN>/SAAS/jersey/manager/api/system/tuning/resiliency/tenant/orgResiliencyConnectorConfiguration?tenantId=<Tenant-Name>" \
   -H "Authorization: HZN <HZN cookie obtained in Step 2>" \
   -H "Content-Type: application/vnd.vmware.horizon.manager.system.tuning.resiliency.config+json;charset=UTF-8" \
   -H "Accept: application/vnd.vmware.horizon.manager.system.tuning.resiliency.config+json" \
   --data-raw '{
     "config": {
       "rateLimitingDisabled": false,
       "rateLimits": {
         "login": {
           "requestsPerMinute": <Desired Limit>
         }
       }
     }
   }'

Additional Information

For more information, refer Setting rate on the VMware Identity Manager Service.

Important Note / Caveat

Configuring overly restrictive API rate limits on VMware Identity Manager (vIDM) may cause inventory synchronization to fail in VMware Aria Suite Lifecycle with error code LCMVIDM70000 (HTTP Status 429 Too Many Requests).

If you experience this issue during inventory syncs, ensure the rate limit threshold is increased (a minimum of 100 requests per minute is recommended for requestsPerMinute) or temporarily disabled. For full troubleshooting details, refer to KB 450759.