Authentication Cache Timeouts

Unwired Server can cache authentication credentials for users in order to improve runtime performance by setting a cache timeout value. These properties used to avoid repeatedly reauthenticating users — a benefit of particular interest for MBS clients, where each message is separately authenticated.

For example, if a user logs in successfully, then during the configured interval, the same user can re-authenticate using the same credentials without validating them against a security repository. However, if the user provides a user name or password that is different from the ones cached, Unwired Server then delegates the authentication request to the security repository.

This property only affects authentication results; authorization results are not cached with this property. By default, the cache timeout value is 3600 minutes (or 3 hours). This value is enabled whether the property exists or not. You can change this value by configuring a new value for the property in Sybase Control Center for the security configuration of your choosing. For details, see Configuring a Security Configuration in the Sybase Control Center online help.

Note: If SAPSSOTokenLoginModule is configured as the security configuration, you must also update the "token expiration interval" property . The cache timeout property must be less than the "token expiration interval" property value. See SAP SSO Token Authentication Properties.