[midPoint] Slow Active Directory get operations for groups

[Alcides Moraes]

Hello list,

Most of the time spent on my reconciliation tasks are of the type AD get group operations. Below is a copy of a recent performance report.
Is this normal? I do have a lot of automatic group assignments in my environment, but the average time of group operations is way too high.
Has anyone ran into this issue and managed to improve it?

Thanks.

Operation
Status
Count
Avg time (ms)
Min time (ms)
Max time (ms)
Total time (ms)
search
9
72
0
558
650
Provisioning operations information: AD - user
Operation
Status
Count
Avg time (ms)
Min time (ms)
Max time (ms)
Total time (ms)
get
2,237
15
6
1,973
34,851
Provisioning operations information: AD - group
Operation
Status
Count
Avg time (ms)
Min time (ms)
Max time (ms)
Total time (ms)
get
11,710
144
2
2,942
1,693,625
search
4,047
0
0
8
119
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20240628/295982ed/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6278 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20240628/295982ed/attachment-0001.bin>