ForgeRock Identity Platform
Does not apply to Identity Cloud

Property substitutions no longer work in system configuration files in IDM (All versions)

Last updated Jan 12, 2023

The purpose of this article is to provide assistance if property substitutions do not work in system configuration files after upgrading IDM.

1 reader recommends this article


Variables that have been defined in are no longer resolved when configuration data is retrieved with REST calls or For example, using an call with the variable in the form &{} does not result in the expected property value being substituted and instead the literal &{} is returned.

Recent Changes

Upgraded IDM.


Changes have been made to how system properties are read and variables are no longer automatically substituted. This change makes it easier to administer configurations via REST since you can now configure one server, retrieve the configuration and push it to another server (previously this was not possible since the variables were automatically substituted meaning what you retrieved could not be applied to other servers). Additionally, this change improves security as there is no longer a risk of exposing substituted values over REST, which could contain sensitive data such as passwords.


This issue can be resolved by using the identityServer.getProperty method to resolve variables in system configuration files.

Refer to the following links for further information:

See Also

Administering and configuring IDM

Configure the Server

Related Training


Related Issue Tracker IDs


Copyright and Trademarks Copyright © 2023 ForgeRock, all rights reserved.