Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Implicit nudge against trying to replicate sessions in extremely large deployments

This page hosts some example IdP throughput numbers for some environments.  Every environment will be different and this should be used as an estimate, not as a substitute for your own load tests.

...

CPU load is primarily determined by the number of logins per second your IdP will experience at peak load due to the cryptography of signing and encrypting assertions.  Latency, when there is enough CPU, will be heavily influenced by the response time of the data sources that the IdP communicates with when authenticating users and acquiring attributes.  RAM consumption is primarily determined by the number of concurrent login sessions each IdP node will keep, which is itself a function of session replication choices, followed by logins per second and session duration.  Total user base size tends to be an issue for upstream data sources to worry about and not a primary factor for load on the IdP.

...