Group Managed Service Accounts (gMSA) Cache Settings
The connector caches gMSA account passwords for service accounts to optimize the password retrieval during operations like bulk provisioning. These settings are configurable in the connector and allow administrators to optimize password retrieval and caching behavior for gMSA accounts. The TTL value is validated in code, so only positive integers are accepted; invalid values are ignored and the connector uses the default setting.
gMSAPasswordCacheEnabled
Type: Boolean (true/false)
Default: true
Description: Enables or disables caching of gMSA (group Managed Service Account) passwords. When set to true, the connector caches retrieved gMSA passwords to improve performance and reduce repeated calls to IQService. By default, caching is enabled.
gMSAPasswordCacheTTLMinutes
Type: Integer
Default: 15
Description: Specifies the time-to-live (TTL) for cached gMSA passwords in minutes.
Allowed Values: Any positive integer (> 0). If set to a value less than or equal to zero, the default of 15 minutes will be used.
For example: Setting this to 10 will cache passwords for 10 minutes.