User Guide

Parameter Description

Logging level Level at which user directory related issues are recorded in the Shared

Services security log files.

Example:

WARN

Support for Security Agent for Single Sign-on Option enabling support for SSO from security agents such as

SiteMinder.

Enable Delegated User Management Mode Option enabling delegated user management of Hyperion products.

See Chapter 6, “Delegated User Management.”

4 Click OK.

Overriding Cache Refresh Interval for MSAD and other LDAP-

Enabled User Directories

By default, Shared Services uses 60 minutes as the cache refresh interval; the period after which

Shared Services refreshes its internal cache of information retrieved from each LDAP-enabled

user directory configured with Shared Services.

Provisioning information for newly added users and groups in LDAP-enabled user directories

is available to Shared Services only after the next cache refresh. This may result in new users and

members of new groups not getting their provisioned roles for up to 60 minutes.

➤ To change the cache refresh interval:

1 Using a text editor, open CSS.xml file.

This file is located in <

HSS_home

>/config. For example, C:\Hyperion\deployments

\WebLogic9\SharedServices9\config

(WebLogic 9.1 on Windows) and /vol1/

Hyperion/deployments/WebLogic9/SharedServices9/config

(WebLogic 9.1 on

UNIX).

2 Insert the following code into the definition of the LDAP-enabled user directory for which you want to modify

cache refresh interval. This line must be placed immediately after the

<authType>simple</

authType>

code line.

</cacheRefreshInterval>

Be sure to replace

with the desired cache refresh interval in minutes. For example,

<cacheRefreshInterval>10</cacheRefreshInterval> to set the interval to 10 minutes.

You can set the interval to

0 if you want to refresh the cache for every call. This affects

performance.

Note:

Cache refresh interval must be set separately for each LDAP-enabled user directory.

3 Save and close the CSS.xml file.

4 Restart the application server if it is running.

Configuring User Directories