Skip to main content

July 16, 2026

Setting Rate Limits on the Omnissa Access Service

You can set limits on the number of login, launch, and WS-Fed requests that can be made per minute to the Omnissa Access service. When the limit is reached, subsequent requests are denied. Setting rate limits helps prevent overload of the system.

For example, if you set the rate limit for login requests to 100, the first 100 login requests per minute are accepted but requests 101-n are denied.

For an Omnissa Access cluster, the rate limit applies to each node in the cluster. For example, if you set the login request rate limit to 100 for a cluster that has NodeA, NodeB, and NodeC, NodeA can process 100 login requests per minute, NodeB can process 100 login requests per minute, and NodeC can process 100 login requests per minute. You cannot set separate login limits per node.

When the limit is reached and requests are denied, end users see the following error message:

Login screen error message

No rate limits are set by default.

You set rate limits using a REST API. Use a REST client such as Postman to make the calls to the Omnissa Access service. The changes take effect in a few minutes.

Setting Rate Limits

Use this API to set rate limits for the Omnissa Access service.

Endpoint: https://AccessHostnameFQDN/SAAS/jersey/manager/api/system/tuning/resiliency/tenant/orgResiliencyConfiguration?tenantId=tenantId

Method: PUT

Description: Sets the maximum number of login, launch, and WS-Fed requests allowed per minute by the Omnissa Access service.

Headers
Content-Typeapplication/json (Access version 24.12.1.0)
Please contact Support for the correct input for Access version 24.12.0.0.
Acceptapplication/json (Access version 24.12.1.0)
Please contact Support for the correct input for Access version 24.12.0.0.
AuthorizationHZN cookie\_value
To get the cookie\_value, log into the Omnissa Access service as the tenant administrator, that is, the admin user that is created when you first install Omnissa Access, and obtain the value of the HZN cookie from your browser's cookie cache.
Path Parameters
AccessHostnameFQDNThe fully-qualified domain name of the Omnissa Access service or load balancer.
tenantIdThe tenant Id of the Omnissa Access service. The tenant ID is the tenant name that appears in the top-right corner of the Omnissa Access console.

Request Body:

{
"config": {
         "rateLimitingDisabled": false,
         "rateLimits": {
             "login": {
                 "requestsPerMinute": n
             },
             "launch": {
                 "requestsPerMinute": n
             },
             "ws-fed": {
         "requestsPerMinute": n
         }
     }
 }
 }
Request Body Parameters
login requestsPerMinuteSpecify the maximum number of login requests allowed per minute.
 Note: Take into account that multiple API requests might be needed for a login request to complete and each API call counts towards the rate limits. For example, password authentication involves two API calls, one to render the login page and the second to submit credentials.
launch requestsPerMinuteSpecify the maximum number of launch requests allowed per minute.
ws-fed requestsPerMinuteSpecify the maximum number of WS-Fed requests allowed per minute. WS-Fed rate limits are for Active Logon configurations only.

Viewing Rate Limits

Use this API to view rate limits that are set for the Omnissa Access service.

Endpoint: https://AccessHostnameFQDN/SAAS/jersey/manager/api/system/tuning/resiliency/tenant/orgResiliencyConfiguration?tenantId=tenantId

Method: GET

Description: Retrieves the rate limits that are currently set for login, launch, and WS-Fed requests for the Omnissa Access service.

Headers
AuthorizationHZN cookie\_value
To get the cookie_value, log into the Omnissa Access service as the tenant administrator, that is, the admin user that is created when you first install Omnissa Access, and obtain the value of the HZN cookie from your browser's cookie cache.
Path Parameters
AccessHostnameFQDNThe fully-qualified domain name of the Omnissa Access service or load balancer.
tenantIdThe tenant Id of the Omnissa Access service. The tenant ID is the tenant name that appears in the top-right corner of the Omnissa Access console.

Sample Output:

{
"config": {
         "rateLimitingDisabled": false,
         "rateLimits": {
             "login": {
                 "requestsPerMinute": 100
             },
             "launch": {
                 "requestsPerMinute": 100
             },
             "ws-fed": {
         "requestsPerMinute": 100
         }
     }
 }
 }
login requestsPerMinuteThe maximum number of login requests allowed per minute.
launch requestsPerMinuteThe maximum number of launch requests allowed per minute.
ws-fed requestsPerMinuteThe maximum number of WS-Fed requests allowed per minute. WS-Fed rate limits are for Active Logon configurations only.

Was this page helpful?

Provide feedback for this topic

Was this topic helpful?

Please do not include any personal or confidential information.

Generating link…