Release Notes

Notes covering ForgeRock IoT features, fixes, and known issues.


ForgeRock IoT increases the security of your existing or planned IoT deployment, and helps you manage complex relationships between users and things. ForgeRock IoT includes multiple components that work together to let devices register, authorize and authenticate securely as identities in the ForgeRock Identity Platform®.

The IoT Gateway and IoT SDK are free to download, evaluate, and use for developing applications and solutions. ForgeRock offers training and support subscriptions to help you get the most out of your deployment.

See the Overview after you read these Release Notes for an understanding of how the ForgeRock IoT components work together.

ForgeRock Identity Platform® serves as the basis for our simple and comprehensive Identity and Access Management solution. We help our customers deepen their relationships with their customers, and improve the productivity and connectivity of their employees and partners. For more information about ForgeRock and about the platform, see The ForgeRock® Common REST API works across the platform to provide common ways to access web resources and collections of resources.


This chapter covers requirements to consider before you use ForgeRock IoT software.

If you have a special request to support a component or combination not listed here, contact ForgeRock at

Product Dependencies

A ForgeRock IoT installation depends on ForgeRock Access Management (AM) with ForgeRock® Directory Services (DS) as the identity store. As such, the requirements listed in Before You Install in the AM Release Notes apply.

Before you try out the examples, or start developing applications, follow the Prerequisites.

What’s New

This chapter covers new capabilities in ForgeRock IoT 7.1.

New Features

The following features are new in ForgeRock IoT:

  • ForgeRock IoT support in the ForgeRock Platform

    • The ForgeOps CDK deployment has been extended to support ForgeRock IoT.

    • Thing registration is delegated to Identity Management, when running in platform mode.

    • An example configuration is provided, to demonstrate relationships between Users and Things.

  • Extended ForgeRock IoT SDK and Gateway capabilities

    • OAuth 2.0 Device Authorization Grant that allows things to act on behalf of users.

    • OAuth 2.0 Access Token Refresh that allows a Thing to refresh a user access token without user interaction.

    • OAuth 2.0 Token Introspection. In addition to local introspection, the SDK now supports remote introspection.

Security Advisories

ForgeRock issues security advisories in collaboration with our customers and the open source community to address any security vulnerabilities transparently and rapidly. ForgeRock’s security advisory policy governs the process on how security issues are submitted, received, and evaluated as well as the timeline for the issuance of security advisories and patches.

For details of all the security advisories across ForgeRock products, see Security Advisories in the Knowledge Base library .

Fixes, Limitations and Known Issues

This chapter covers the status of key issues and limitations for ForgeRock IoT 7.1.


The following important issues were fixed in this release:

  • THINGS-24: Intermittent failure when registering a thing

  • THINGS-27: Requesting tokens and config fails when using SSL termination

Known Issues

ForgeRock IoT issues are tracked at

No known issues remain open at the time of this release.

Documentation Updates

Documentation Change Log tracks important changes to the documentation:

Documentation Change Log
Date Description


First release of ForgeRock IoT 7.1 documentation.

Interface Stability

ForgeRock Product Release Levels

ForgeRock defines Major, Minor, Maintenance, and Patch product release levels. The version number reflects release level. The release level tells you what sort of compatibility changes to expect.

Release Level Definitions
Release Label Version Numbers Characteristics


Version: x[.0.0] (trailing 0s are optional)

  • Bring major new features, minor features, and bug fixes.

  • Can include changes even to Stable interfaces.

  • Can remove previously Deprecated functionality, and in rare cases remove Evolving functionality that has not been explicitly Deprecated.

  • Include changes present in previous Minor and Maintenance releases.


Version: x.y[.0] (trailing 0s are optional)

  • Bring minor features, and bug fixes.

  • Can include backwards-compatible changes to Stable interfaces in the same Major release, and incompatible changes to Evolving interfaces.

  • Can remove previously Deprecated functionality.

  • Include changes present in previous Minor and Maintenance releases.

Maintenance, Patch

Version: x.y.z[.p]

The optional p reflects a Patch version.

  • Bring bug fixes

  • Are intended to be fully compatible with previous versions from the same Minor release.

ForgeRock Product Stability Labels

ForgeRock products support many features, protocols, APIs, GUIs, and command-line interfaces. Some of these are standard and very stable. Others offer new functionality that is continuing to evolve.

ForgeRock acknowledges that you invest in these features and interfaces, and therefore must know when and how ForgeRock expects them to change. For that reason, ForgeRock defines stability labels and uses these definitions in ForgeRock products.

ForgeRock Stability Label Definitions
Stability Label Definition


This documented feature or interface is expected to undergo backwards-compatible changes only for major releases.

Changes may be announced at least one minor release before they take effect.


This documented feature or interface is continuing to evolve and so is expected to change, potentially in backwards-incompatible ways even in a minor release. Changes are documented at the time of product release.

While new protocols and APIs are still in the process of standardization, they are Evolving. This applies for example to recent Internet-Draft implementations, and also to newly developed functionality.


This feature or interface has been replaced with an improved version, and is no longer receiving development effort from ForgeRock.

You should migrate to the newer version, however the existing functionality will remain.

Legacy features or interfaces will be marked as Deprecated if they are scheduled to be removed from the product.


This feature or interface is deprecated, and likely to be removed in a future release.

For previously stable features or interfaces, the change was likely announced in a previous release.

Deprecated features or interfaces will be removed from ForgeRock products.


This feature or interface was deprecated in a previous release, and has now been removed from the product.

Technology Preview

Technology previews provide access to new features that are considered as new technology that is not yet supported. Technology preview features may be functionally incomplete, and the function as implemented is subject to change without notice.


Customers are encouraged to test drive the technology preview features in a non-production environment, and are welcome to make comments and suggestions about the features in the associated forums.

ForgeRock does not guarantee that a technology preview feature will be present in future releases, the final complete version of the feature is liable to change between preview and the final version. Once a technology preview moves into the completed version, said feature will become part of the ForgeRock platform.

Technology previews are provided on an “AS-IS” basis for evaluation purposes only, and ForgeRock accepts no liability or obligations for the use thereof.


Internal and undocumented features or interfaces can change without notice.

If you depend on one of these features or interfaces, contact ForgeRock support or email to discuss your needs.