Active directory aggregation taking more time in IdentityNow

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Active directory aggregation taking more time when VA and AD DC’s were in different location.

we had two VA’s and AD DC’s were located in same location(north colo) then aggregation will complete in 30 to 40mins for 150k+ accounts.

as per load balancing we do have one more new VA in different location(south colo) and we observed when aggregation running from specific new VA it takes around 7 to 8hr to complete.

and also we do have AD DC’s in south colo and we had a configured in source level too those ip’s, so now both north colo DC’s and south colo DC’s were configured but still issue not getting resolved.

is there any way we can configure south colo VM should always point to south colo DC’s and same for north colo.

we do have such option in IIQ specific server details we can configure while aggregation but if we can in IDN too please suggest.

thanks,
Praveen
so is there any way we can configure

2

Hi @praveen726,

I will suggest for this Delta Aggregation, go to your source and additional settings, enable delta aggregation checkbox.

For more details: click here Delta Aggregation

3

Hi @praveen726,

Take a look at the below documentation on VA deployments. Any of the VA added in a VA cluster can take up the assigned task and you do not have any control on which VA should be assigned the task.

The document highlights the possibility of latency issues if you have VA’s of different location added in the same cluster for HA.

image
image1066×547 47.2 KB

You can consider creating another VA cluster with VA’s residing only in (north colo) and assign it to your AD sources, if that solves your problem.