Cached System Objects

Document created by RSA Information Design and Development on Feb 12, 2018
Version 1Show Document
  • View in full screen mode

RSA Authentication Manager saves the following system objects in the cache on each Authentication Manager instance. The data saved in the cache is specific to each primary or replica instance. For example, the instance that approves a user passcode would save information on the hardware or software token, the authentication policies that apply to that user, any user groups that include the user, the authentication agent that sent the authentication request, and so forth.

                                                                                                   

Cache Name

Description

AdminRoleCache

Administrative roles that are assigned to administrators who have actively logged on to the system.

AgentCache

Authentication agents that have contacted the Authentication Manager instance.

AttributeDefinitionCache

User attributes, such as the custom user attributes that an administrator defined for RADIUS or on-demand authentication.

AuthenticationPolicyCache

Polices that apply to users who have authenticated, such as the token policies and risk-based authentication policies.

AuthenticatorCache

Information on hardware tokens, software tokens, on-demand tokencodes, and RSA SecurID Authenticate Tokencodes that have been used to authenticate to the Authentication Manager instance.

BatchJobCache

Batch jobs, such as token import jobs, that have run on the Authentication Manager instance.

ConfigCache

Configuration settings that are specific to each instance, such as SNMP configuration settings, and the system settings, which are defined in the Security Console, that affect the entire deployment.

FailedCrossISSearchUserCache

Information on users who could not be found in identity sources that are linked to Authentication Manager.

GroupAdminCache

Administrative information about groups:

  • Restrictions that apply to user groups, such as the security domain for the group, and the agents that each group can use for authentication,
  • Descriptive information, such as the group names.

GroupMemberGroupCache

User groups can contain multiple users and user groups. The group membership by group cache maintains information on user groups that is organized by group.

GroupMemberPrincipalCache

User group membership for the users that successfully authenticated, including LDAP group membership data.

GroupMembershipCache

Group membership data.

IdentitySourceCache

Identity sources that were used for authentication.

KeyManagerCache

Information on SSL certificates.

LicenseCache

RSA Authentication Manager licenses that apply to the deployment.

PrincipalAdminCache

Information about administrators who are currently logged on.

RealmSettingsCache

Connection information for trusted realms that are trusted by the current Authentication Manager deployment.

RelatedIdentitySourceCache

Connection information for identity sources and LDAP directory servers.

RTConditionCache

Runtime conditions, such as what user interface elements are displayed in the consoles.

RTRoleCache

Roles that are used by administrators.

SecurityDomainCache

Security domains in the deployment.

ServerListCache

Information on other Authentication Manager instances in the deployment.

 

 

 

 


Attachments

    Outcomes