The Purge Expired Data plugin is used to delete expired entries or attribute values, and cleanup expired PingFederate Persistent Access Grants. When the plugin is enabled, a background thread in the plugin periodically searches for and purges expired data. It is recommended that the Purge Expired Data plugin be enabled on multiple servers in a topology. One server can be configured to delete data, while others can be searching for expired data.

The Purge Expired Data plugin is created and configured with the dsconfig tool. Configuration options include the base DN and filter, the items to be purged, how to identify expired data, and the frequency for polling and purging. The search for expired data must be indexed. An alarm is raised if the server purging data falls behind the configured max-updates-per-second. Monitoring information is available in the Admin Console, or cn=monitor.