What is the recommended maximum number of users for crowd with external LDAP Sync ?

Question

What is the recommended maximum number of users for Crowd with external LDAP Sync?

We have few hundred thousands of users/groups in our active directory (~500K). We have been trying to cache the entities by a full synchronization, which always times out.

So my question here is to check if there is any LDAP limitation. Is delegated authentication the recommended approach for our sizing ? Does delegated authentication approach's limitation based on sizing of the database ?

Bruno Vincent · Answer

Hi Kumaran,

Atlassian recommends to leave caching disabled for very large user bases. Please, check out this page.

"Be aware of the optimal number of users. We have optimised the database caching for directories containing approximately 10 000 (ten thousand) users. If your directory is significantly larger, the new caching may not be as beneficial. For really large user bases, we recommend that you leave the caching disabled."

Have you considered splitting your AD configuration in multiple directories in Crowd (let's say, one per OU if that makes sense in your AD) and then check "Aggregate group memberships across directories" in the application configuration view?

Regards,

Bruno