User Directory Searches

Making sure that SiteMinder can efficiently search users directories directly correlates with performance. Consider the following:

Use directory indexing to enhance search results for SiteMinder:
- LDAP—the objectClass attribute, in addition to all other attributes used in searches, should be indexed.
  Note: Microsoft recommends using the objectCategory attribute instead of objectClass. Failing to index the objectClass attribute in Active Directory can result in significant performance degradation.
- ODBC—All fields defined as search criteria in SiteMinder schema queries should be indexed.
  Note: See your vendor-specific documentation for more information about indexing.
Design queries to return manageable sets of user groups.
Note: If you are unable to optimize the query, set the maximum search results parameter to limit large result sets from degrading overall performance.
Optimize SQL query schemes for ODBC with any standard SQL analyzer.