Identity Cloud

Manage self-service promotion of applications using the UI

The topics in this section are for tenants created or migrated to on or after January 12, 2023. Refer to Application management migration FAQ.

For background on self-service promotions using the UI, refer to Manage self-service promotions using the UI.

Application promotion process

The process of promoting applications is a UI-only feature. When you run a promotion, the lower environment sends the upper environment a snapshot of the application configuration in the lower environment. Then, when you log into or refresh the Identity Cloud admin UI of the upper environment, the applications are promoted according to the following rules:

New applications

If an application does not exist in the upper environment, the following rules apply:

  • If the application has any associated connectors, mappings, or SAML 2.0 configuration promoted as static configuration, the application is also created in the upper environment using the snapshot information from the lower environment. The new application is associated with any static configuration.

  • If the application has an associated OAuth 2.0 client, you are presented with the choice to load the dynamic configuration for that OAuth 2.0 client into the upper environment:

    • If you choose to load the dynamic configuration, the application is also created in the upper environment using the snapshot information from the lower environment. The new application is associated with the dynamic configuration.

    • If you choose not to load the dynamic configuration, the application is not created in the upper environment.

Existing applications

If an application already exists in the upper environment, the following rules apply:

  • If the application has associated static configuration such as connectors, mappings, or SAML 2.0 configuration, the application is overwritten using the snapshot information from the lower environment.

  • If the application has an associated OAuth 2.0 client, you are presented with the choice to overwrite the dynamic configuration for that OAuth 2.0 client using the snapshot information from the lower environment. Refer to Load dynamic configuration associated with promoted application configuration.

Deleted applications

If an application exists in the upper environment but has been deleted in the lower environment, the following rules apply:

  • If the application has associated static configuration such as connectors, mappings, or SAML 2.0 configuration, it is deleted.

  • If the application has an associated OAuth 2.0 client but no associated static configuration, it is not deleted.

View application changes awaiting promotion to the upper environment

For background on viewing changes in the Promotion tab, refer to View changes awaiting promotion to the upper environment.

The Promotion tab also shows a list of all the applications in the environment. This is shown after any static configuration changes and is simply a list of applications (rather than a list of applications that have configuration changes).

For example, in the screenshot below, the UI shows one item of static configuration (a connector associated with the ServiceNow application) and then lists the three applications in the environment:

idcloudui promotion view changes applications development

Load dynamic configuration associated with promoted application configuration

If you promoted any applications that have associated OAuth 2.0 clients, you can load the dynamic configuration for those OAuth 2.0 clients into the upper environment.

  1. After the promotion has completed in the lower environment, log into or refresh the Identity Cloud admin UI of the upper environment.

  2. If any dynamic configuration is available to load, the promotions UI shows a Load Application Dynamic Data modal window:

    idcloudui promotion applications load dynamic data

    1. If you want to update some or all of your applications:

      1. Click Choose Application Updates then click Next to open the Choose Applications to Update modal, which shows a list of the applications that you can update with dynamic configuration.

      2. In the Choose Applications to Update modal, check the applications for which you want to load configuration:

        idcloudui promotion applications choose update

        If you choose to overwrite dynamic configuration for an application, you will lose any customizations to the configuration for that application in the upper environment.
      3. Click Update Applications.

    2. If you don’t want to update any of your applications and don’t want the Update Application Data? modal window to show again (for you or any other tenant administrator):

      1. Click Don’t Update then click Next.

      2. In the Don’t Update Application Data? confirmation modal, click Don’t Update.

    3. If you don’t want to update any of your applications right away but want the Update Application Data? modal window to show again (for other tenant administrators or when you next log in):

      1. Click Skip this.

      2. In the Skip Update? confirmation modal, click Skip Update.

Copyright © 2010-2024 ForgeRock, all rights reserved.