Skip to content

Latest commit

 

History

History
106 lines (51 loc) · 2.37 KB

rate-limiting-and-throttling-e22ee47.md

File metadata and controls

106 lines (51 loc) · 2.37 KB

Rate Limiting and Throttling

This section provides information on the rate limiting and SCIM API throttling Identity Authentication.

To ensure safe and stable environment, all requests have a limit of 50 concurrent requests per second. The requests are associated with the originating IP address, and not with the user making the requests.

When the limit is exceeded, the client receives the HTTP 429 Too Many Requests response status code.

To prevent Identity Authentication from being overloaded by too many requests, we have introduced SCIM API throttling to regulate the API usage per tenant.

SCIM API Throttling

Requests per minute

Notes

up to 200

The requests are executed.

201 to 280

The requests are delayed by 1 second.

281 and more

The client receives the HTTP 429 Too Many Requests response status code for 60 seconds.

To ensure safe and stable environment, all requests to the /oauth2 endpoints have a limit of 1000 requests per minute per tenant. When the limit is exceeded, the client receives the HTTP 429 Too Many Requests response status code. The requests are associated with the originating IP address, and not with the user making the requests.

For a list of the relevant endpoints, use the following URL:

https://<tenant ID>.accounts.ondemand.com/.well-known/openid-configuration

Tenant ID is an automatically generated ID by the system. The first administrator created for the tenant receives an activation e-mail with a URL in it. This URL contains the tenant ID. For more information about your tenants, see Viewing Assigned Tenants and Administrators.

If you've a custom domain configured, the URL has the following pattern:

https://<your custom domain>/.well-known/openid-configuration