PingAuthorize

Configuring Trust Framework attribute caching for production

For higher environments, including testing and production, you can define an external attribute cache for the Trust Framework.

With the Policy Decision Service set to embedded policy decision point (PDP) mode, the PingAuthorize Server is configured by default to cache attribute values in memory (for any attributes with a defined caching strategy). Alternatively, you can define an external attribute cache using the following Redis modes:

  • Single Redis instance

  • Single Redis instance using TLS

  • Replicated Redis

  • Redis Sentinel

  • Amazon Web Services (AWS) ElastiCache Redis

Setting up Redis external attribute caching in the UI

Before you begin

To successfully assign an external Redis attribute cache to the Policy Decision Service, you must set PDP Mode to embedded.

Steps

  1. On the Configuration page of the PingAuthorize administrative console, go to Authorization and Policies > External Attribute Caches.

  2. Select your desired Redis mode in the New External Attribute Cache list.

    Example:

    Screen capture of the options in the New External Attribute Cache list, with arrows pointing to the button and a selected option

  3. At minimum, enter the required values, as indicated by a red asterisk, and click Save To PingAuthorize Server Cluster.

    For more information on a field, click the question mark icon.

    Example:

    Screen capture of defining Redis configuration values for a new Redis cache, with arrows pointing to the required fields and the save button

  4. Go to Authorization and Policies > Policy Decision Service.

  5. In the Trust Framework Attribute Cache Configuration section, in the External Attribute Cache list, select your Redis cache name and click Save To PingAuthorize Server Cluster.

    Example:

    Screen capture of the External Attribute Cache list with arrows point to the list and the save button

    Alternatively, you can use the controls next to the External Attribute Cache list to create, edit, or remove external Redis caches:

    • Click the Plus icon to create a new external attribute cache.

    • Click the Pencil icon to edit the configuration of the selected attribute cache.

    • Click X to remove the attribute cache from the Policy Decision Service and revert the PDP to an in-memory attribute cache.