Saviynt API Rate Limiting & Performance Impact Assessment

[Sivagami]

Hi Team,

We have a requirement to dump user listing of applications onboarded to Saviynt into a different tool for a business use case.

We thought we can expose the analytics ES data API to the app team and let them get the analytics data. But, we are quite worried about the performance impact it can cause to the overall system. 

Could someone give insights on the rate limiting capabilities and hence avoid the performance impacts?

-Siva

[Ishan]

Hi @Sivagami , as per the API documentation, 

• The Web Application Firewall (WAF) limit for Saviynt EIC is 5000 / IP /5minutes. This limit ensures that the network traffic communicating with EIC is legitimate, and enhances security.

[Sivagami]

Thanks @Ishan. If I understand correctly, the limit is 5000 requests overall from all IP's right in 5 mins?

Is it a standard setting or something based on customer's environment?

[Ishan]

Hi @Sivagami , its 5000 requests per IP per 5 mins. This is a standard setting done at the infra level to prevent DDOS attacks.