Access Manager is a high performing web access management solution which supports many industry-standard protocols such as SAML, WS-Federation, WS-Trust, OAuth, OpenID Connect, and others.

New Relic is Application Performance Management service, which monitors and manages the performance and availability of a software application. New Relic provides the APM is SaaS model.

This cool solution will explain how to enable monitoring for Access Manager's Identity Server with New Relic APM service so that we can monitor the Identity Server performance using the New Relic portal.

Following are the steps involved for enabling Identity Server monitoring with New Relic.

1. Downloading the New Relic Java Agent.

• Configuring the IDP to use Newrelic java agent and to start sending the performance matrices to the NewRelic.

• Monitoring the Identity Server.

[1] Downloading the NewRelic Java agent

1. Log in to New Relic. You need to create a New Relic account to login if you don't have one already.

• From the New Relic menu bar, select (account) > Account settings.

• Download the Java agent for your platform.

[2] Installing the New Relic Java agent in Identity Server

1. Log in to the Identity Server (ssh)

• Create a new folder in the Identity Server, for example mkdir /opt/novell/nam/idp/webapps/nidp/newrelic/

• Unzip the content of downloaded Java agent to the above folder.

• The unzipped content will have newrelic.yml file and a newrelic.jar

• Edit the newrelic.yml and give appropriate name for the application, for example "app_name: Identity Server"

• Edit the /opt/novell/nam/idp/conf/tomcat.conf and add the javaagent parameter for the JAVA_OPTS to point to the downloaded New Relic Java agent.
  Example: JAVA_OPTS="${JAVA_OPTS} -javaagent:/opt/novell/nam/idp/webapps/nidp/newrelic/newrelic.jar"

• Restart the Identity Server - /etc/init.d/novell-idp restart

[3] Monitoring the Identity Server

Now log in to the New Relic APM site to see the Identity Server's performance information.

Sample graphs:

Identity Server Overview

Identity Server JVM Monitoring

Identity Server Thread Profiler

Identity Server Top Transactions

This cool solution is provided with basic configuration required for Access Manager to be monitored by New Relic APM service. For more monitoring options you can refer the New Relic portal.