Product Q&As
ForgeRock Identity Cloud

What environments are available in Identity Cloud and what is the promotion process?

Last updated Jan 23, 2023

The purpose of this article is to explain what environments are available in ForgeRock Identity Cloud and how you should use them. It also provides information about the promotion process.

4 readers recommend this article


Identity Cloud comes with three separate tenant environments, where each has a different purpose:

Using multiple environments ensures any changes you make are fully tested before they are made available to end users. 

You can promote configuration from Development to Staging or Staging to Production. You cannot promote configuration straight from Development to Production. See Understanding the promotion process for further information.

Sandbox environments

A Sandbox environment can also be added to your subscription if required; this is a completely separate environment from your tenant environments and configuration cannot be promoted from it. See Sandbox tenant environments for further information. 


The Development environment is the place where you can develop and test out potentially breaking changes without impacting other environments or users. Once these changes have been fully tested and any bugs fixed, you can promote these changes to your Staging environment. 

You should note the following:

  • It is a mutable environment. This means you can customize it and build new authentication experiences, all through a cloud-based UI and API.
  • It is not scaled for high availability or performance, and should not be used for any performance or load testing.
  • The number of identities is limited to 10,000.


The Staging environment is intended for testing applications with realistic settings and data. It should mirror your Production environment as closely as possible.

Once your changes have been promoted to Staging, you should test them thoroughly to ensure they work as expected in a realistic environment and also to performance/load test your changes to ensure they do not impact performance. Once you have completed your testing, you can promote these changes to your Production environment. 

You should note the following:

  • It is an immutable environment.
  • It is scaled for high availability and performance to match your Production environment to facilitate realistic testing.


The Production environment contains all your live data, and is intended for real applications and end users. No development or testing should take place in this environment.

You should note the following:

  • It is an immutable environment.
  • It is scaled for high availability and performance.

Understanding the promotion process

When you want configuration promoted from one environment to another, you can promote the configuration yourself as described here: Introduction to self-service promotions.

The high-level process for promotion is as follows:

  1. Promote configuration from your Development environment to Staging.
  2. Confirm your Staging environment is working correctly after promotion. It is important you test your Staging environment thoroughly to ensure it is working as expected before proceeding.
  3. Promote configuration from your Staging environment to Production.

Please be aware of the following important points:

  • All static configuration in an environment is promoted. This means you cannot pick and choose what items are promoted, or only promote one realm but not the other. See Promotion process FAQs for further information on what is promoted.
  • When you promote configuration from one environment to another, you must lock the lower and upper environments to prevent any conflicts during the promotion period. See Environment locking for further information.
  • Automated backups are taken regularly and all configuration data is stored in Git repositories with the history preserved. See What if I need to roll back a configuration? for further information.

See Also

Development, staging, and production tenant environments

Sandbox tenant environments

Introduction to self-service promotions

Environment locking

Copyright and Trademarks Copyright © 2023 ForgeRock, all rights reserved.