Skip to main content
Version: 26.1

Cache configuration

The Authorization Hub allows you to define attribute caching to improve a Policy Decision Point's (PDP) performance. This is achieved by caching attribute values that are fetched from external sources such as SQL or LDAP servers. Cache configurations define if and how a PDP should cache these attributes, and are managed as separate, independent objects with their own lifecycle within the Authorization Hub.

Cache profiles​

Cache profiles define a Time to live and a Max items value for the cache configuration. Time to live specifies in seconds how long the Policy Decision Point (PDP) will store cached values, while Max items specifies the maximum number of attribute values the cache will store per attribute mapping.

The Authorization Hub includes a configurable default cache profile that applies to all attribute mappings. This profile's default values are both set to 0, which means no caching is performed. However, by changing these values, you can create a universal cache profile that applies to all attribute mappings. Any attribute mappings with a custom cache profile will override this default setting.

Create a cache profile​

You can also create multiple custom profiles and apply them to specific attributes within your Dictionary.

Create a cache profile from the Cache configuration page as follows:

  1. Click + Add new profile and give it a name.

  2. In the Time to live field, specify in seconds how long the Policy Decision Point (PDP) will store cached values. Once this time expires, the cached values will be removed from the PDP's memory.

  3. In the Max items field, enter the maximum number of attribute values the cache will store per attribute mapping.

  4. Click Save on the upper right corner.

    You're all set! You can now map this new cache profile to the attribute(s) of your choice.

Manage cache profiles​

The Cache Configuration page lists all cache profiles you have created, including the default one. Manage them as follows:

  • Delete a cache profile

    1. Click the trash icon next to the profile you want to delete.

      note

      You can't delete the default cache profile.

    2. Confirm your action by clicking Yes, delete.

      If you delete a cache profile that was assigned to one or more attributes, those attribute mappings will automatically revert to the default cache profile.

  • Edit a cache profile

    1. Make your changes directly within the cache profile, following the same steps as in the Create a cache profile section above.

      note

      You can't rename the the default cache profile.

    2. To apply your changes, click Save on the upper right corner.