Manage user access is very slow

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

8.3p4

Share all details about your problem, including any error messages you may have received.

What troubleshooting tips / remedies do you have to identity / fix why Manage User Access becomes unusable?

2

There can be multiple reasons for slowness on the “Manage User Access” page. Please check your system configuration to determine whether the issue is limited to this page or affects other components as well.

Additionally, review the Java JVM Memory Tuning Guide for IdentityIQ, as improper JVM settings can significantly impact performance.

In our experience with IdentityIQ 8.2, we encountered a similar issue where Role/ent was failing to load. This was caused by one of our task server instances being partially down due to a long-running task.

There is eFix is also available to address the Role/Ent loading issue in “manage user Access”.

3

Hi @cwhittle

Troubleshooting tips and remedies

  1. Clear browser cache or try a different browser.
  2. Check for any network slowness.
  3. Ensure your application server has sufficient JVM heap memory allocated.
  4. Verify that all system tasks are successful.
  5. Work with your DBA team to identify any long-running queries.
    {SailPoint provides schema and indexing recommendations in their performance tuning guides. }
  6. The database is often the primary bottleneck for UI performance.
  7. Work with SailPoint Support and your DBA to identify and optimize these specific queries, potentially through additional indexes.

How many application servers do you have?

Dedicated UI vs. Task Servers:

  • Remedy: In production environments, it’s a best practice to separate UI-facing servers from task-processing servers. Configure ServiceDefinition objects to route user requests to UI servers and background tasks to task servers. This ensures that heavy backend processing doesn’t impact user experience.

useful links:

Performance Management Guide for IdentityIQ - Compass

IdentityIQ Database Performance Tests - Compass

Java JVM Memory Tuning Guide for IdentityIQ - Compass

4

@cwhittle is it happening for all user or limited users ? please let us know.

5

Thanks all (so far) for your prompt responses, suggestions, and pointers.

  • The MUA slowness happens with all users.
  • I’m not finding an eFix for the Role/Ent loading issue in “manage user Access”. This should be incorporated in 8.3p4. Right?
  • Our memory is fairly well tuned and have read the tuning guides provided (thanks)

I wish there were a troubleshooting tool that would tell us where the bottleneck is when it happens (or steps to isolated the bottleneck). This is frustrating for our operators (and those of us trying to explain why).

6

one angle you can try, if this slowness happen recently then you can look on recent changes or any patch you did recently. Run idx rule to see if user is corrupted. sometime it happen if user has lots of workgroups.

7

One thing you have to be cognizant about is that JVM xmx shouldn’t be close to the max memory. Most organizations are requiring SIEM and other agents that just love using up memory.

1 Like
8

Hi @cwhittle - where exactly is the slowness occurring? When rendering the Identity selector or the access page?

9

Hi @cwhittle ,

please kindly check the following thread on Compass
https://community.sailpoint.com/t5/IdentityIQ-Forum/Selecting-a-role-takes-long-time-in-access-request-in-8-3/m-p/236461

and especially if the mentioned ETN ( SET-15328).

I’m not sure if this is fixed in 8.3p4, please kindly reach out to your CSM and request an e-fix if not already fixed via patch.
This was a known issue with 8.3.

Thanks,
Daniel

10

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.