Setting rate limit on VMware Identity Manager 3.3.7

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

The purpose of this article is to understand how to set rate limit on VMware Identity manager appliances.

Environment

VMware Identity Manager 3.3.7

Resolution

Steps to configure rate limiting using cURL on VMware Identity Manager (vIDM):

1. Log in to VMware Identity Manager in a browser using a local admin account.

2. Retrieve the HZN cookie:

   • Open Developer Tools in your browser.

   • Navigate to Application → Cookies and copy the HZN cookie value.

3. Verify current rate limit settings:
   Run the following cURL command to check existing limits:

   curl -k -X GET "https://<VIDM_FQDN>/SAAS/jersey/manager/api/system/tuning/resiliency/tenant/orgResiliencyConfiguration?tenantId=<TENANT_NAME>" -H "Authorization: HZN <HZN_cookie_from_step_2>" -H "Content-Type: application/json"

4. Update rate limit for system domain users:

   Use this cURL command to set your desired limits:

   curl -k -X PUT   "https://<VIDM_FQDN>/SAAS/jersey/manager/api/system/tuning/resiliency/tenant/orgResiliencyConfiguration?tenantId=<TENANT_NAME>" -H "Authorization: HZN <HZN cookie obtained in Step 2>" -d '{     "config": {
   >       "rateLimitingDisabled": false,
   >       "rateLimits": {
   >         "login": {
   >           "requestsPerMinute": <Desired limit>
   >         },
   >         "launch": {
   >           "requestsPerMinute": <Desired limit>
   >         },
   >         "ws-fed": {
   >           "requestsPerMinute": <Desired limit>
   >         }
   >       }
   >     }
   >   }'  -H "Content-Type: application/vnd.vmware.horizon.manager.system.tuning.resiliency.config+json;charset=UTF-8" -H "Accept application/vnd.vmware.horizon.manager.system.tuning.resiliency.config+json"

    

5. Update rate limit for Active Directory domain users:
   Run this command:

   curl -k -X PUT "https://<VIDM-FQDN>/SAAS/jersey/manager/api/system/tuning/resiliency/tenant/orgResiliencyConnectorConfiguration?tenantId=<Tenant-Name>" \
   -H "Authorization: HZN <HZN cookie obtained in Step 2>" \
   -H "Content-Type: application/vnd.vmware.horizon.manager.system.tuning.resiliency.config+json;charset=UTF-8" \
   -H "Accept: application/vnd.vmware.horizon.manager.system.tuning.resiliency.config+json" \
   --data-raw '{
     "config": {
       "rateLimitingDisabled": false,
       "rateLimits": {
         "login": {
           "requestsPerMinute": <Desired Limit>
         }
       }
     }
   }'

Additional Information

For more information, refer Setting rate on the VMware Identity Manager Service.