Can someone tell me what the mechanism is for the WSA to update new information from the CDA? For example, if there was no IP-user mapping and we re-auth'd the user and verified a mapping was created, when would the WSA get this info. Also, is there a way to force this to occur?
We've just implemented the CDA and are having issues with mappings being removed by the TTL and never recreated because users are not logging in often enough. They lose the mapping (and access to a site), re-auth and mapping comes back, but still no access to the site until sometime later.