Tuning Identity Panel for fast scans

Applies to: Identity Panel 3.3.8 (all Editions)

With the release of 3.3.8, there are new settings which you can use to performance tune data collection:

Tune the Sync Provider:

Enable Rapid Scan

Identity Panel now decides to run a Full scan or an MA run scans based on the number of objects that have changed. If more than 33% of objects in an MA are new or different from what’s in Identity Panel, Identity Panel will perform a Full Scan, which will be fast for the volume of changes.

WMI Timeout

This setting no longer needs to be tuned, because Identity Panel will always go straight to CSExport on objects with so many references that they would normally receive a WMI timeout.

Reference Attributes from Hologram

This is selected by default on new providers. It is recommended that you switch it on for your existing providers. Selecting this will reduce the number of database queries that need to be made on large groups, and therefore, it is beneficial.

Parallel Scan Limit

This value controls the number of MAs that can be read in parallel during a scan. On most MIM installations, 5 is a good compromise number for speed without overloading MIM.

On Run steps:

Skip CS/MV Scan

If you have a run that adds too much scan time to the schedule and wants to sacrifice Time Traveler resolution for performance, this checkbox lets you avoid scanning object changes on individual runs. For example, you might skip scanning the result of a delta import, and just scan the delta sync that comes after.

Reference Count Threshold

If you specify a non-zero threshold, Identity Panel will skip scanning any objects (i.e. groups) with more reference values (i.e. members) than the indicated value. This was implemented to solve the problem of all employees (and similar) groups that change regularly and then take in the range of 15 minutes to export on the delta cycle. Skipped groups exceeding the threshold will be skipped and then will be picked up and rationalized on your next full scan.