AM release notes

Removed

The functionality listed here was removed.

AM 7.5

Java 11

AM 7.5 removes support for Java 11. Only Java 17 is supported in this release.

SNMP monitoring

SNMP monitoring was deprecated in AM 7.3 and is no longer supported.

AM 7.4

No features or functionality were removed in this release.

AM 7.3

Removal of CTS worker pool

The org.forgerock.services.cts.async.queue.size and org.forgerock.services.cts.async.queue.timeout advanced configuration properties were removed.

For details, refer to: Removal of CTS worker thread pool.

AM 7.2

No features or functionality were removed in this release.

AM 7.1

No features or functionality were removed in this release.

AM 7.0

AM 7.0.1

SOAP STS service installation

Installing instances of the SOAP STS service in AM 7.0.1 is not supported. However, upgrading existing instances is.

AM 7.0

Authentication through /UI/login endpoint

Authentication through the /UI/login has been removed. Rewrite your clients to use the /XUI/#login/ endpoint instead.

/openam/cdservlet

The cdservlet servlet, which was used by Web Agents and Java Agents earlier than version 5 to accomplish CDSSO, was removed from AM 7.

As a result, the following were also removed:

  • The classic CDSSO mode.

  • The following AM advanced server properties:

    • com.iplanet.services.cdc.invalidGotoStrings

    • org.forgerock.openam.cdc.validLoginURIs

  • The com.sun.identity.federation.services.idpLoginURL JVM property.

IDFF cdservlet-related legacy audit log events are no longer logged.

Support for SAML v1.x

Support for SAML v1.x was removed from AM 7. However, AM 7 does support SAML v2.0.

For more information about SAML v2.0, refer to the SAML v2.0 Guide.

Supported APIs

AM 7 removes the following APIs from the com.sun.identity.authentication.AuthContext class, to allow AM to support Java 11:

  • constructor: public AuthContext(String orgName, String nickName) throws AuthLoginException

  • constructor: public AuthContext(String orgName, String nickName, URL url) throws AuthLoginException

  • method: public static void setCertDBPassword(String password)

The following APIs were also removed:

  • Deprecated SAE_PARAM_APPID field removed from the SecureAttrs class.

  • Deprecated SiteAttributeMapper and PartnerSiteAttributeMapper interfaces removed.

    Instead, use the ConsumerSiteAttributeMapper interface.

  • Deprecated getAttributeMapForFedlet method removed.

    Instead, use the getAttributesForFedlet method.

SAML v2.0 service configurations service

This service was removed by realm. The metadata and signing aliases were removed from the global service configuration, since the providers now use secret stores.

CTS Reaper property org.forgerock.services.cts.reaper.search.pageSize

This advanced server property was removed.

Dashboard wizards

The wizards in the Dashboard of the administrative users have been removed. They were using the JATO implementation of the UI, which is not supported with Java 11.

Advanced server property org.forgerock.openam.audit.access.attempt.enabled

This property was replaced by the org.forgerock.openam.audit.identity.activity.events.blacklist advanced server property.

For more information, refer to Advanced properties.

AM 6.5

AM 6.5.4

/identity

Access to the legacy /identity endpoints was removed.

AM 6.5.3

Advanced server property org.forgerock.openam.audit.access.attempt.enabled

This property was replaced by the org.forgerock.openam.audit.identity.activity.events.blacklist advanced server property.

For more information, refer to Advanced Properties in the Reference guide.

Copyright © 2010-2024 ForgeRock, all rights reserved.