E-LDAP: Dynamic Role Assignment has Locking Issues Under Heavy Load
Last updated on FEBRUARY 07, 2017
Applies to:PeopleSoft Enterprise PT PeopleTools - Version 8.4 and later
Information in this document applies to any platform.
This document was previously published as Customer Connection Solution 201055849
When using LDAP for authentication, and assigning roles to users as they logon via directory named groups that match PeopleSoft roles, the PeopleCode program that does the loading of PeopleSoft roles from LDAP is causing a performance problem for us under heavy load.
The problem is the fact that the code for UpdateUserProfile, deletes all roles form the user first, as they logon, and then adds all the roles from LDAP back into the user profile. This occurs even if there are no role changes. Once done, the Save method causes the PSLOCK to be updated on the objecttypename of 'UPM'.
When several hundred logins are happening per minute, this table cause users to lockup (block) when logging into the system.
A much better approach would be to only update the profile is updating is needed.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms