Scripting lets you extend Identity Cloud functionality. For example, you can provide custom logic between source and target mappings, define correlation rules, filters, triggers, and so on. This guide shows you how to use scripts in Identity Cloud and provides reference information on the script engine.
Groovy version 3.0.4 for Groovy script support.
Lodash 3.10.1 and Handlebars 4.7.6 for Rhino scripting.
Using Handlebars JS in server-side JS scripts requires synchronization; for example:
BouncyCastle 1.67 for signing JWTs.
The BouncyCastle .JAR file that is bundled with Identity Cloud includes the
org.bouncycastle.asn1.util.Dumpcommand-line utility. Although this utility is not used directly by Identity Cloud, it is possible to reference the utility in your scripts. Due to a security vulnerability in this utility, you should not reference it in your scripts. For more information, see the corresponding BouncyCastle issue.
Script options and locations are defined in
conf/script.json. Default scripts are located in (
/path/to/openidm/bin/defaults/script/). Do not modify the scripts in this directory. Rather copy the default scripts to a different location, make the changes, and update the referenced scripts in the applicable
conf/ file. You can put custom scripts in any of the locations referenced in the
sources property in
ForgeRock Identity Platform™ serves as the basis for our simple and comprehensive Identity and Access Management solution. We help our customers deepen their relationships with their customers, and improve the productivity and connectivity of their employees and partners. For more information about ForgeRock and about the platform, see https://www.forgerock.com.
The ForgeRock Common REST API works across the platform to provide common ways to access web resources and collections of resources.