ICF release notes | ICF 1.5.20.36

1.5.20.36 Framework

Wed, 26 Aug 2026 04:08:15 GMT

OPENICF-3538: Fixed an issue where the response-encoding pipeline held the same large payload in memory multiple times, which could exhaust RCS heap memory when returning very large results from Get operations.
OPENICF-3543: Fixed an issue where a SEARCH or SYNC operation that timed out on the IDM side didn’t send a cancellation request to the RCS, leaving the remote connector operation running after IDM gave up.

1.5.20.35 Framework

Tue, 09 Jun 2026 15:16:23 GMT

OPENICF-3510: Prevent the Framework from attempting to dispatch requests through WebSockets in the process of completing the IDM< - >RCS handshake.

1.5.20.34 Framework

Thu, 26 Mar 2026 16:23:42 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.33 Framework

Tue, 10 Mar 2026 11:35:00 GMT

OPENICF-3349: The RCS resolves DNS names each time it establishes a new WebSocket connection.

1.5.20.32 Framework

Tue, 30 Sep 2025 11:35:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.31 Framework

Tue, 02 Sep 2025 17:00:00 GMT

OPENICF-2939: The default ICF operation timeout for all connector operations has changed from no timeout (-1) to 15 seconds. This update applies to new connector configurations generated using the createCoreConfig action.

1.5.20.30 Framework

Mon, 07 Jul 2025 11:35:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.29 Framework

Wed, 23 Apr 2025 11:35:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.28 Framework

Thu, 27 Feb 2025 11:46:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.26 Framework

Fri, 06 Dec 2024 15:16:00 GMT

OPENICF-2973: Resolves a race condition within the Java Framework that could result in Groovy ClassLoader failures at runtime.
OPENICF-2751: You can configure global operation rate limits on a per-operation basis for any connector. Learn more in Operation rate limits.

1.5.20.25 Framework

Tue, 22 Oct 2024 14:11:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.24 Framework

Tue, 24 Sep 2024 16:32:00 GMT

OPENICF-2882: The connector framework lets you define nested objects (map objects) in the provisioner configurationProperties.

1.5.20.23 Framework

Thu, 01 Aug 2024 19:24:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.22 Framework

Fri, 21 Jun 2024 16:50:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.21 Framework

Tue, 19 Mar 2024 12:46:00 GMT

OPENICF-2642: Align Jetty servlet WebSocketConnectionGroup check interval with default Java RCS value.

1.5.20.18 Framework

Fri, 17 Nov 2023 15:41:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.15 Framework

Fri, 12 May 2023 12:51:00 GMT

OPENICF-2384: Java Framework: Allow __PASSWORD__ removal via null values.

1.5.20.11 Framework

Tue, 01 Nov 2022 17:39:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.8 Framework

Wed, 24 Aug 2022 17:39:00 GMT

OPENICF-1998: Local/RemoteRequest congruence checks should throw a retryable exception upon failure.

1.5.20.7 Framework

Mon, 06 Jun 2022 12:00:00 GMT

OPENICF-1883: Java RCS: Improve stability of RCS WebSocket connection management.

1.5.20.6 Framework

Thu, 05 May 2022 12:00:00 GMT

OPENIDM-17535: IDM stack releases that include bundled connectors should continue to work with existing provisioner configuration.

1.5.20.5 Framework

Mon, 14 Feb 2022 12:00:00 GMT

OPENICF-1855: Investigate handling query 'poison pill' termination via recon automatic retry upon exception receipt.

1.5.20.4 Framework

Wed, 08 Dec 2021 12:00:00 GMT

No public changes were made to the framework, though a new version was released.

1.5.20.3 Framework

Mon, 22 Nov 2021 12:00:00 GMT

OPENICF-1704: Framework: resetConnectorInfos does not implement intent.
OPENICF-1730: Client ConnectorInfos cache not refreshed upon RCS instance restart when using RCS Agent.
OPENICF-1735: Upgrade to groovy 3.0.9.

1.5.20.0 Framework

Fri, 16 Apr 2021 12:00:00 GMT

For a list of security issues addressed in this release, refer to the related Security Advisory in the Knowledge Base.

OPENICF-1566: Framework: ICF Jetty servlet default maxMessageSize is too small.

1.5.19.6 Framework

Fri, 26 Feb 2021 12:00:00 GMT

No issues specific to the ICF Connector Framework were addressed in this release.

1.5.19.5 Framework

Fri, 12 Feb 2021 12:00:00 GMT

No issues specific to the ICF Connector Framework were addressed in this release.

1.5.19.4 Framework

Fri, 22 Jan 2021 12:00:00 GMT

No issues specific to the ICF Connector Framework were addressed in this release.

1.5.19.3 Framework

Sun, 13 Dec 2020 12:00:00 GMT

No issues specific to the ICF Connector Framework were addressed in this release.

1.5.19.2 Framework

Mon, 30 Nov 2020 12:00:00 GMT

No issues specific to the ICF Connector Framework were addressed in this release.

1.5.19.1 Framework

Wed, 18 Nov 2020 12:00:00 GMT

No issues specific to the ICF Connector Framework were addressed in this release.

1.5.19.0 Framework

Tue, 20 Oct 2020 12:00:00 GMT

Starting in version 1.5.19.0, ICF connectors that previously had external library dependencies now have those dependencies bundled inside the connector.

OPENICF-1413: Use framework version 1.5.11.0 for ldap-connector to support Java8-compatible release.
OPENICF-1414: Scripted Groovy (v3) based connectors fail to load with IDM releases prior to 7.0.

1.5.18.0 Framework

Mon, 14 Sep 2020 12:00:00 GMT

Starting in version 1.5.18.0, the ICF Connector Framework and all connectors bundled with IDM share a unified version number.

No issues specific to the ICF Connector Framework were addressed in this release.

1.5.20.36 Connectors

Wed, 26 Aug 2026 04:08:15 GMT

Updated connectors with change details

Box connector

OPENICF-3558: Fixed an issue where the connector discarded additionalTokenParams, breaking enterprise OAuth token requests that require box_subject_type and box_subject_id for token scoping.

Database Table connector

OPENICF-3622: Fixed two JDBC connection leaks, one per paged query and one during connector instance initialization, that caused the connection pool to grow until exhausted.
OPENICF-3623: The connector now provides improved logging and traceability, including per-operation timing and IDM transaction ID correlation, to help diagnose slow or failing operations without enabling global debug logging.

LDAP connector

OPENICF-2922: Fixed an issue where LiveSync removed a user’s ldapGroups on Active Directory account updates, while reconciliation synced them correctly.
OPENICF-3541: Fixed a regression where a custom GUID attribute configured as a plain string was incorrectly treated as binary, causing its value to be returned hex-encoded and breaking _queryFilter searches on that attribute.
OPENICF-3598: Fixed an issue where the connector didn’t correctly support read and LiveSync of the ldapGroups attribute when the underlying memberOf attribute is ranged, containing more than 1,500 entries, on Microsoft Active Directory.

MS Graph API

OPENICF-3485: The connector now supports Entra ID access packages. The new accessPackage object class supports read and query. The __accessPackages__ attribute on the user object lets you read and replace a user’s access package assignments. The attribute isn’t returned by default. Request it explicitly. Requires the EntitlementManagement.Read.All permission (plus EntitlementManagement.ReadWrite.All to grant or revoke assignments).
OPENICF-3485: Fixed a paging cookie truncation issue affecting all paging handlers. URI.getQuery() decoded percent-encoding before splitting query parameters, which stripped base64 == padding from skiptoken values and caused paging failures on certain result sets. All handlers now use URI.getRawQuery().
OPENICF-3566: Fixed a Jackson dependency regression that caused connector initialization and the test() operation to fail.

Multiple CSV connector

OPENICF-3557: Fixed a performance issue where resolving linkedObject references rescanned the entire linked CSV file for every account record, causing large reconciliations to time out.
OPENICF-3572: Fixed a potential race condition where concurrent operations across connector instances had no cross-instance file-locking coordination, which could result in a torn read of a linked CSV file mid-write.
OPENICF-3652: Fixed an issue where a single-UID GET parsed the entire CSV file instead of stopping at the first match, making lookup time proportional to file size rather than the position of the match.

Multiple CSV Cloud connector

OPENICF-3557: Fixed a performance issue where resolving linkedObject references rescanned the entire linked CSV file for every account record, causing large reconciliations to time out.
OPENICF-3572: Fixed a potential race condition where concurrent operations across connector instances had no cross-instance file-locking coordination, which could result in a torn read of a linked CSV file mid-write.
OPENICF-3652: Fixed an issue where a single-UID GET parsed the entire CSV file instead of stopping at the first match, making lookup time proportional to file size rather than the position of the match.

SaaS Common

OPENICF-3460: The jwtExpiration configuration property description is updated to reflect that the value is in minutes, not seconds. Learn more in Changed functionality.

SCIM connector

OPENICF-3573: Fixed an issue where the test() operation failed for SCIM providers that return an HTTP 401 (instead of 404) from /ServiceProviderConfig, by letting the connector fall back to /ServiceProviderConfigs.
OPENICF-3644: Fixed an issue where the __groupMemberships__ attribute wasn’t included in results when the connector performed implicit pagination, which could cause a full reconciliation to return different results than reconById for the same user.

ServiceNow connector

OPENICF-3416: The connector now supports managing Alumni Center users through the new alumniUser object type.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Admin Console connector ^{(SaaS common)}
Adobe Marketing Cloud connector
AWS connector
Cerner connector
DocuSign connector ^{(SaaS common)}
Dropbox connector ^{(SaaS common)}
Duo connector
Epic connector
Google Cloud Platform connector
HubSpot connector
Marketo connector
Oracle EBS connector
Peoplesoft connector
PingOne connector ^{(SaaS common)}
RACF connector
SaaS REST connector ^{(SaaS common)}
Salesforce connector
SAP connector
SAP S/4HANA connector
Scripted REST connector
Snowflake connector ^{(SaaS common)}
SuccessFactors connector
Webex connector ^{(SaaS common)}
Workday connector

1.5.20.35 Connectors

Tue, 09 Jun 2026 15:16:23 GMT

Updated connectors with change details

MS Graph API

OPENICF-2961: The connector now supports custom user extension attributes. Configure extensionPropertySourceAppIds to discover and expose custom extension properties registered to your Azure applications.
OPENICF-3473: The connector now surfaces more specific error details when health checks or connector operations fail, making it easier to distinguish proxy, Microsoft Graph API, and OAuth authentication failures.

Multiple CSV connector

OPENICF-3470: The connector no longer throws an OutOfMemoryError during initialization when CSV files contain large field values.
OPENICF-3472: Write operations no longer load entire CSV files into heap memory for single-row modifications, reducing memory pressure in large deployments.

PingOne connector

OPENICF-3506: Fixed encoding for spaces and special characters in filter values.

SaaS Common

OPENICF-3456: The HTTP Client User-Agent is now configurable. It defaults to PingIdentityConnector.
OPENICF-3459: The jwtPem, jwtCert, and jwtKey configuration properties are now treated as secured (GuardedString) values.
OPENICF-3496: The connector schema is no longer overwritten on every schema request.

Snowflake connector

OPENICF-3488: Fixed a null pointer exception when a transient connectivity failure occurs while querying a remote Snowflake instance.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Admin Console connector ^{(SaaS common)}
Adobe Marketing Cloud connector
AWS IAM Identity Center connector
Box connector ^{(SaaS common)}
DocuSign connector ^{(SaaS common)}
Dropbox connector ^{(SaaS common)}
LDAP connector
MongoDB connector
Multiple CSV Cloud connector
Oracle EBS connector
RACF connector
SaaS REST connector ^{(SaaS common)}
SAP connector
SCIM connector
ServiceNow connector
SuccessFactors connector
Webex connector ^{(SaaS common)}
Workday connector

1.5.20.34 Connectors

Thu, 26 Mar 2026 16:23:42 GMT

Updated connectors with change details

LDAP connector

OPENICF-3437: Improved LDAP server discovery for PingDS and PingDirectory.
OPENICF-3438: The LDAP connector correctly populates LDAP modify operation context, preventing accumulation of replicated control requests.

Microsoft Graph API connector

OPENICF-3435: The Microsoft Graph API connector now correctly handles adding passwords to application objects.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Admin Console connector
Adobe Marketing Cloud connector
AWS connector
Box connector
Cerner connector
DocuSign connector
Dropbox connector
Duo connector
Epic connector
Google Cloud Platform connector
HubSpot connector
Marketo connector
Multiple CSV Cloud connector
Oracle EBS connector
Peoplesoft connector
PingOne connector
RACF connector
SaaS REST connector
Salesforce connector
SAP S/4HANA connector
SCIM connector
Scripted REST connector
Snowflake connector
SuccessFactors connector
Webex connector

1.5.20.33 Connectors

Tue, 10 Mar 2026 11:35:00 GMT

New connectors

Snowflake connector

Updated connectors with change details

Google Apps connector

OPENICF-3302: The connector now clears the user aliases field through patch actions.
OPENICF-3332: The connector now uses the Equals (EQ) filter on the new parentOrgUnitPath attribute to allow querying an OrgUnits object. Learn more in Deprecated functionality and in Supported search filters.

LDAP connector

OPENICF-3320: The connector configuration no longer includes the obsolete property respectResourcePasswordPolicyChangeAfterReset. Learn more in Changed functionality.

Oracle EBS connector

OPENICF-3379: The connector now doesn’t require the __NAME__ attribute in __ACCOUNT__ attribute updates. Learn more in Changed functionality.
OPENICF-3389: The connector now supports the delete operation on the __ACCOUNT__ object type. Learn more in Changed functionality.
OPENICF-3389: The connector now includes a new boolean configuration property to enable queries to return only active accounts or all accounts. Learn more in Changed functionality.
OPENICF-3394: The connector now handles updates on the __ENABLE__ attribute based on the UID of the updated user instead of in the content of the payload __NAME__ attribute. Learn more in Changed functionality.

SaaS Common

OPENICF-3371: OAuth access tokens are now renewed at a minimum of 60 seconds before their expiration.

SAP SuccessFactors connector

OPENICF-3412: The SuccessFactors connector now correctly stores the schema caching mechanism in the connector configuration.

SCIM connector

OPENICF-3360: The SCIM connector now supports finer rate-limiter granularity to control the operation execution rate. For example, you can configure the rate limiter to any positive rational number, such as 0.5/sec or 30/min. Learn more in Changed functionality.
OPENICF-3377: The connector now supports the filterAttributesToGet boolean configuration property that determines if the SCIM attributes parameter should be included when reading resources using the SCIM endpoint. Learn more in Changed functionality and in SCIM connector configuration.

Workday connector

OPENICF-3324: Fixed the XPath transformation logic that could incorrectly alter expressions and lead to invalid results.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Admin Console connector ^{(SaaS common)}
Adobe Marketing Cloud connector
AS400 connector
AWS IAM Identity Center connector
Box connector ^{(SaaS common)}
Database table connector
DocuSign connector^{(SaaS common)}
Dropbox connector ^{(SaaS common)}
Groovy connector ^{(Scripted Groovy)}
HubSpot connector
Microsoft (MS) Graph API connector
MongoDB connector ^{(Scripted Groovy)}
Multiple CSV Cloud connector
Multiple CSV connector
PingOne connector ^{(SaaS common)}
SaaS REST connector ^{(SaaS common)}
Salesforce connector
SAP connector ^{(Scripted Groovy)}
SAP Hana DB connector
Scripted REST connector ^{(Scripted Groovy)}
Scripted SQL connector ^{(Scripted Groovy)}
ServiceNow connector
SSH connector ^{(Scripted Groovy)}
Webex connector ^{(SaaS common)}

1.5.20.32 Connectors

Tue, 30 Sep 2025 17:00:00 GMT

Updated connectors with change details

Dropbox connector ^{(SaaS common)}

OPENICF-3266: The connector throws a proper error when attempting to perform an unsupported PATCH operation.

LDAP connector

OPENICF-3048: New enforceADPasswordPolicyOnReset configuration property specific for Active Directory to enable the enforcement of password policies on password resets.

You can’t set enforceADPasswordPolicyOnReset using the UI. You must edit the provisioner file directly or use the REST API.
OPENICF-3273: Ensure proper decoding of LDAP referral URLs.
OPENICF-3284: Improved password policy validation error feedback for PingDS and Active Directory.
OPENICF-3286: Fixes LDAP change log sync strategy for IBM Security Directory Server type to correctly skip changes.
OPENICF-3287: You can’t set port 0 in the connector configuration.
OPENICF-3288: Port 3268 and 3269 (SSL) are now enforced for Active Directory Global Catalog detection.

SaaS Common

OPENICF-3263: JWT bearer flow no longer requires the client_secret to obtain an access token.

SaaS REST Connector ^{(SaaS common)}

OPENICF-3272: Fixes an issue where __UID__ resources that contained a space weren’t properly URL-encoded when injected within the request URL.
OPENICF-3277: Fixes a NullPointerException that can occur when attempting to unflatten attributes not present in the request payload.

SAP HANA Database connector

OPENICF-3241: The connector no longer uses the cascade option when dropping users.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Admin Console connector ^{(SaaS common)}
AWS IAM IC connector
Box connector ^{(SaaS common)}
Database table connector
DocuSign connector ^{(SaaS common)}
MS Graph API connector
Multiple CSV Cloud connector
Oracle EBS connector
PingOne connector ^{(SaaS common)}
ScriptedSQL connector
Webex Connector ^{(SaaS common)}
Workday connector

1.5.20.31 Connectors

Tue, 02 Sep 2025 17:00:00 GMT

Updated connectors with change details

DocuSign connector

OPENICF-3150: The connector now returns an empty query result instead of throwing an UnknownUidException when it cannot find a resource for queries using the UID.

Multiple CSV connector

OPENICF-3270: Fixes complex queries against multiple special attributes such as _id and __NAME__.

Multiple CSV Cloud connector

Initial release of the Multiple CSV Cloud connector.

SAP SuccessFactors connector

OPENICF-3139: The connector now uses a OpenSAML to generate SAML assertions locally.

SaaS REST Connector

OPENICF-3157: Support for dynamic ICF resource filtering.
OPENICF-3158: Support for restricting fields using OP_ATTRIBUTES_TO_GET.
OPENICF-3233: Fixes invalid __ACCOUNT__ object type definition when using the createCoreConfig action.
OPENICF-3253: Fixes issue when a DELETE request requires a requestBody.

SCIM connector

OPENICF-3260: The connector could incorrectly inject a multiValuedAttributes attribute into Create and Update payloads sent to the remote SCIM Provider.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

AWS IAM IC connector
Box connector
CSV File connector
Kerberos connector
MongoDB connector
MS Graph API connector
SAP connector
SAP HANA DB connector
Scripted REST connector
Webex connector
Workday connector

1.5.20.30 Connectors

Mon, 07 Jul 2025 11:35:00 GMT

Updated connectors with change details

Database Table connector

OPENICF-2250: Connector attributes with the configuration property changeLogColumn can pass to the connector object.

Google Apps connector

OPENICF-3081: Use the passwordHashAlgorithm property to hash the connector __PASSWORD__ attribute during transport.
OPENICF-3088: Bug fix preventing update for __ACCOUNT__ and __GROUP__ secondary objects when the payload didn’t include changes for the primary Google object.

Kerberos connector

OPENICF-3170: The scriptRoots value returned by the createCoreConfig action was invalid.

LDAP connector

OPENICF-3101: The LDAP connector can read the Novell eDirectory GUID attribute.

Microsoft Graph API connector

OPENICF-1911: Support for the ability to use environment variables when authenticating with Azure.

SaaS Common

OPENICF-3097: JWT auth flow now supports PEM-formatted private keys.

SaaS REST Connector

OPENICF-3114: Ability to send a payload in a delete request.
OPENICF-3167: Fixes a Gson serialization issue preventing the SaaS REST connector from working with an RCS.

Salesforce connector

OPENICF-3122: Adds the initialSyncTokenOffset configuration property. Use this property to define a period, in hours, to subtract from the current time when generating the initial Salesforce sync token. Default value is 0 hours.

SCIM connector

OPENICF-3091: When generating the ICF Schema, the ICF ObjectClass type was incorrectly set to the SCIM Schema name instead of the ResourceType name.

ServiceNow connector

OPENICF-2422: The connector supports the ServiceNow user object property cost_center.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Box connector
CSV connector
Scripted REST connector
Hubspot connector
Webex connector

1.5.20.29 Connectors

Wed, 23 Apr 2025 11:35:00 GMT

New connectors

SaaS REST Connector

Updated connectors with change details

Adobe Marketing Cloud connector

OPENICF-2983: Connector invalidates access token on authentication failure.
OPENICF-3044: Removed runtime configuration properties. Learn more in Changed functionality.

Box connector

OPENICF-2978: Connector invalidates access token on authentication failure.

Epic connector

OPENICF-2982: Connector invalidates access token on authentication failure.
OPENICF-3046: Removed runtime configuration properties. Learn more in Changed functionality.

Google Cloud Platform connector

OPENICF-2980: Connector invalidates access token on authentication failure.

HubSpot connector

OPENICF-2979: Connector invalidates access token on authentication failure.

LDAP connector

OPENICF-3018: For DS 8.0 or later LDAP servers, the connector pages the change log with a search control cookie instead of filtering against change numbers. Change numbers are no longer required to set up and use the sync action.

Marketo connector

OPENICF-2984: Connector invalidates access token on authentication failure.
OPENICF-3045: Removed runtime configuration properties. Learn more in Changed functionality.

SaaS Common

OPENICF-2967: Support for JWT authentication flow with framework 1.5.20.24 or later and RCS 1.5.20.24 or later.
OPENICF-2985: Connector invalidates access token on authentication failure.

Salesforce connector

OPENICF-2977: Connector invalidates access token on authentication failure.

SAP SuccessFactors connector

OPENICF-2981: Connector invalidates access token on authentication failure.

SCIM connector

OPENICF-2975: Connector invalidates access token on authentication failure.

ServiceNow connector

OPENICF-2976: Connector invalidates access token on authentication failure.

1.5.20.28 Connectors

Thu, 27 Feb 2025 11:46:00 GMT

New connectors

Multiple CSV connector

Updated connectors with change details

Microsoft Graph API connector

OPENICF-2910: You can now read the following Contacts attributes:
- directReports
- memberOf
- transitiveMemberOf
- manager
These attributes are not returned by default.
OPENICF-3005: You can now read the following servicePrincipal attributes:
- owners
- memberOf
- transitiveMemberOf
- oauth2PermissionGrants
These attributes are not returned by default.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

AWS IAM Identity Center connector
LDAP connector
SaaS Common connectors
Scripted Groovy connectors
Workday connector

1.5.20.27 Connectors

Thu, 09 Jan 2025 16:00:00 GMT

Updated connectors with change details

Google Apps connector

OPENICF-2996: Correctly maps License Assignment read operation parameters to Google API calls.

LDAP connector

OPENICF-2992: Improved support for IBM directory changelog "changes" binary attribute.

1.5.20.26 Connectors

Fri, 06 Dec 2024 15:16:00 GMT

New connectors

Duo connector

Updated connectors with change details

AWS IAM Identity Center connector

OPENICF-2968: Error when renewing access token.

Epic connector

OPENICF-2941: Querying Epic accounts could fail.

LDAP connector

OPENICF-2931: PingDirectory is now a recognized LDAP directory.

Microsoft Graph API connector

OPENICF-2900: Added a user resource attribute authenticationMethods that is a read-only list of objects containing the authentication methods associated with a user.
OPENICF-2901: User email authentication methods can be added/updated/deleted using a new String attribute __emailAuthenticationMethod__ that contains the email associated with the user’s authentication preference.
OPENICF-2902: The connector can now manage phone authentication methods on a user using a new virtual multivalued String attribute __phoneAuthenticationMethods__ that contains a definitive list of concatenated "{phoneNumber}:{phoneType}".
OPENICF-2903: Adds multivalued string attribute __removeFido2Methods__ to the user schema. This attribute takes a list of String GUIDs to be deleted as Fido2 auth method IDs associated with a user.
OPENICF-2912: Adds multivalued string attribute __removeMicrosoftAuthenticatorMethods__ to the user schema. This attribute holds a list of GUIDs associated with MicrosoftAuthenticator authentication method IDs to be removed from a user.
OPENICF-2913: Adds multivalued string attribute __removeSoftwareOathMethods__ to the user schema. This attribute holds a list of GUIDs associated with Software Oath authentication method IDs to be removed from a user.

MongoDB connector ^{(Scripted Groovy)}

OPENICF-2987: Update MongoDB driver to version 4.11.4.

SAP S/4HANA connector

OPENICF-2915: You can specify the instanceUrl of the SAP Hana instance in the connector configuration properties.
OPENICF-2934: Query paging fixes.

SCIM connector

OPENICF-2880: Reduce logging noise when a schema extension overrides a core schema attribute.

Scripted Groovy

OPENICF-2955: The Scripted Groovy scriptRoots configuration property can now reference Groovy scripts embedded within the connector JAR file using the ! prefix.

Workday connector

OPENICF-1148: Support for updating the primary work phone number using the primaryWorkPhone connector attribute.
OPENICF-2622: You can use XPath transformations to simplify and map Workday attributes directly to read-only connector object type properties.

Requires connector framework version 1.5.20.24 or later.
OPENICF-2891: Deprecate Workday connector schema attribute mobile.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Admin Console connector
Adobe Marketing Cloud connector
AS400 connector
AWS connector
Box connector
Cerner connector
CSV connector
Database table connector
DocuSign connector
Dropbox connector
Google Apps connector
Google Cloud Platform (GCP) connector
HubSpot connector
IBM RACF connector
Kerberos connector
Marketo connector ^{(Scripted Groovy)}
Oracle EBS
Peoplesoft connector
PingOne connector
Powershell connector toolkit
Salesforce connector
SAP connector ^{(Scripted Groovy)}
SAP HANA Database connector
SAP SuccessFactors connector
ScriptedREST connector ^{(Scripted Groovy)}
ScriptedSQL connector ^{(Scripted Groovy)}
ServiceNow connector
SSH connector ^{(Scripted Groovy)}
Webex connector

1.5.20.23 Connectors

Thu, 01 Aug 2024 19:24:00 GMT

New connectors

Updated connectors with change details

Adobe Admin Console connector ^{(SaaS common)}

OPENICF-2792: Set the type for the orgSpecific and businessAccount schema attributes to boolean.
OPENICF-2845: Ability to update the user’s email address.
OPENICF-2851: Updating group memberships for an Adobe account may result in excessive email notifications.

Amazon Web Services (AWS) connector

OPENICF-2755: Support for groups, roles, managed policy, inline policy, service control policy, and org unit object types.

LDAP connector

OPENICF-2805: SASL-EXTERNAL (mTLS) is now available with the LDAP connector.

Microsoft Graph API connector

OPENICF-2834: The virtual resource displaying service plans as their own object now includes the skuPartNumber as a readable attribute. Additionally, the display name of service plans is now a combination of the skuPartNumber and the servicePlanName.

SaaS Common

OPENICF-2781: During token renewal, properly cache new refresh token in the connector configuration.

SAP SuccessFactors connector

OPENICF-2847: Resolve ArrayIndexOutOfBoundsException when consuming older connector configuration.

Webex Connector ^{(SaaS common)}

OPENICF-2619: Properly handle HTTP 400 error responses during Webex user creation.

Workday connector

OPENICF-2524: Paged queries with no results throw an internal server error.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Marketing Cloud connector
AS400 connector
Cerner connector
CSV connector
Database table connector
DocuSign connector ^{(SaaS common)}
Dropbox connector ^{(SaaS common)}
Epic connector
Google Apps connector
Google Cloud Platform (GCP) connector
Groovy connector toolkit
HubSpot connector
IBM RACF connector
Kerberos connector
Marketo connector
MongoDB connector
Oracle EBS
Peoplesoft connector
PingOne connector ^{(SaaS common)}
Powershell connector toolkit
Salesforce connector
SAP connector
SAP HANA Database connector
SAP S/4HANA connector
SAP SuccessFactors connector
SCIM connector
ScriptedREST connector
ScriptedSQL connector
ServiceNow connector
SSH connector

1.5.20.22 Connectors

Fri, 21 Jun 2024 16:50:00 GMT

Updated connectors with change details

Adobe Admin Console connector

OPENICF-2559: Initial release of the Adobe Admin Console connector. Refer to Adobe Admin Console connector for more information.

Database Table connector

OPENICF-2679: Reduce log level of many operations

DocuSign connector

OPENICF-2557: DocuSign connector v2
- OPENICF-2583: Add ObjectClass UserGroups
- OPENICF-2587: Add filter support for Users ObjectClass
- OPENICF-2588: Add filter support for the UserGroups ObjectClass
- OPENICF-2766: Wrong exception message when the connector is configured incorrectly

IBM RACF connector

OPENICF-2757: Support for new object types, segments, and attributes

MongoDB connector

OPENICF-2784: Update MongoDB driver to version 4.11.2

Oracle EBS connector

OPENICF-1760: EBS Connector v2, support responsibilities

PingOne connector

OPENICF-2740: Enhance user password to accept external password assignments

SAP SuccessFactors connector

OPENICF-2428: Account Object: Group Name not required
OPENICF-2528: Support schema discovery and writeback

SCIM connector

OPENICF-1617: Ability to assign groups to users
OPENICF-2669: The read rate limit may be exceeded during queries
OPENICF-2672: Reconciliation after patch remove on managed user throws NPE and full updates omit remove operations
OPENICF-2682: Using dynamic schema, multivalued attributes of schema extensions are improperly handled
OPENICF-2710: Creating users/groups with multivalued extension attributes fails
OPENICF-2726: Do not fail on unknown Enum values when deserializing schemas
OPENICF-2735: The endpoint in use for a given ResourceType was incorrectly derived from the objectClass defined by the IDM provisioner configuration instead of from the endpoint specified by the ResourceTypes response from the SCIM Provider

Workday connector

OPENICF-2524: liveSync on Workday custom fields now works

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Marketing Cloud connector
AS400 connector
AWS connector
Cerner connector
CSV connector
Dropbox connector
Epic connector
Google Apps connector
Google Cloud Platform (GCP) connector
Groovy connector toolkit
HubSpot connector
Kerberos connector
LDAP connector
Marketo connector
MS Graph API connector
Peoplesoft connector
Powershell connector toolkit
Salesforce connector
SAP connector
SAP HANA Database connector
SAP S/4HANA connector
ScriptedREST connector
ScriptedSQL connector
ServiceNow connector
SSH connector
Webex connector

1.5.20.21 Connectors

Tue, 19 Mar 2024 12:46:00 GMT

Updated connectors with change details

Dropbox connector

OPENICF-2664: SaaS Client Initializer should not automatically add default HTTP headers
OPENICF-2655: Logging levels in use by generated connector class are too verbose

Epic connector

OPENICF-2233: Add support for managing SER resources
OPENICF-2492: EMP Enhancements

Google Apps connector

OPENICF-2617: Deprecate __SECONDARY_EMAIL__ in favor of __SECONDARY_EMAILS__ attribute

LDAP connector

OPENICF-2544: LiveSync timestamp strategy may lose changes when remote handler returns false

PingOne connector

OPENICF-2507: Initial release of the PingOne connector. Refer to PingOne connector for more information.

SAP connector

OPENICF-2410: Additional attributes in the Profile Object Type
OPENICF-2411: Additional attributes in the Activity Groups Object Type

Scripted REST connector

OPENICF-1917: Support for throttling

Webex Connector

OPENICF-2047: Initial release of the Webex connector. Refer to Webex Connector for more information.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

AWS connector
Kerberos connector

1.5.20.20 Connectors

Tue, 06 Feb 2024 16:00:00 GMT

Updated connectors with change details

Database Table connector

OPENICF-2606: Schema is unnecessarily regenerated for every operation.

Google Apps connector

OPENICF-2194: PATCH remove operation doesn’t update the object when both the field and value are provided.
OPENICF-2351: Include 503 errors in the retry logic for GoogleApps connector.
OPENICF-2490: Requests hang if the Google Admin SDK API has not been enabled within the configured Google Project.

Microsoft Graph API connector

OPENICF-2593: Upgrade azure-identity dependency to latest version.

Salesforce connector

OPENICF-2626: A duplicate header sent by the connector prevents successful OAuth flow.

SCIM connector

OPENICF-2575: Running liveSync for object classes other than the Account object results in an error.
OPENICF-2601: Inject common attributes within dynamically generated schemas for all resource types.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Marketing Cloud connector
Marketo connector
ScriptedREST connector
ScriptedSQL connector

1.5.20.19 Connectors

Fri, 17 Nov 2023 20:00:00 GMT

Updated connectors with change details

SCIM connector

OPENICF-1296: HTTP Status and Error Response Handling.
OPENICF-2574: Authorization header contains an extra space which breaks client_credentials flow.
OPENICF-2579: TestOp should catch all exceptions thrown by the initial attempt to read the alternate ServiceProviderConfig endpoint.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Microsoft Graph API connector

1.5.20.18 Connectors

Fri, 17 Nov 2023 15:41:00 GMT

Updated connectors with change details

Dropbox connector

OPENICF-2354 Missing property messages.

Google Apps connector

OPENICF-2487 License assignment account attribute should be an array of strings.

LDAP connector

OPENICF-2296: Bad IP address for the LDAP host should be caught, and a 503 error code should be returned by IDM.
OPENICF-2401: queryFilter true or false against isActive attribute returns all results.
OPENICF-2526: Specify a negative offset (in seconds) to be applied to the timestamp token when querying for changes on the remote LDAP server using the timestampSyncOffset configuration property.
OPENICF-2555: Ability to define custom octet string attributes using the customOctetStringAttributes configuration property.

Microsoft Graph API connector

OPENICF-2006: Clicking on Azure AD connector for the first time throws a 500 error.
OPENICF-2027: Support single quotation marks in query filters.
OPENICF-2140: Info level logging is overused for this connector.

Salesforce connector

OPENICF-1527: Returns a generic ConnectorException 'Error: 400' on expired/revoked refresh_token.
OPENICF-2246: Implement support for Client Credentials Grant type. Refer to Configure the Salesforce connector.
OPENICF-2266: User schema is not cached.
OPENICF-2505: createFullConfig NPEs when supportedObjectTypes contains FeatureLicense.

SAP connector

OPENICF-2371: Scripts for SAP HR searching and filtering.
OPENICF-2465: Prevent activity group assignment from being deleted when the assignment is end-dated.
OPENICF-2480: SAP Central User Administration (CUA) support.

SAP HANA Database connector

Initial release of the SAP HANA Database connector. Refer to SAP HANA Database connector for more information.

OPENICF-2368: SAP HANA Database connector.

SCIM connector

OPENICF-1528: Salesforce returns a generic ConnectorException 'Error: 400' on expired/revoked refresh_token.
OPENICF-2472: access_token validation checked on issued_at claim instead of expires_in for refresh_token grant.
OPENICF-2500: Extension attributes not flattened when converted to ConnectorObject.
OPENICF-2504: Map JSON integer type to Java Long.

Updated connectors without change details

Connectors without change details can include security, formatting, and other internal-facing fixes.

Adobe Marketing Cloud connector
AS400 connector
AWS connector
Box connector
Cerner connector
CSV connector
Database Table connector
DocuSign connector
Epic connector
GCP connector
HubSpot connector
IBM RACF connector
Oracle EBS connector
Peoplesoft connector
SAP S/4HANA connector
SAP SuccessFactors connector
ScriptedREST connector
ScriptedSQL connector
ServiceNow connector
Workday connector

1.5.20.17 Connectors

Thu, 07 Sep 2023 12:00:00 GMT

Database Table Connector

1.5.20.16 Connectors

Wed, 02 Aug 2023 12:00:00 GMT

Dropbox connector

1.5.20.15 Connectors

Fri, 12 May 2023 12:51:00 GMT

Adobe Marketing Cloud connector

1.5.20.14 Connectors

Mon, 20 Mar 2023 12:00:00 GMT

AS400 Connector

1.5.20.12 Connectors

Fri, 09 Dec 2022 17:39:00 GMT

AS400 Connector

1.5.20.11 Connectors

Tue, 01 Nov 2022 17:39:00 GMT

Adobe Marketing Cloud connector

1.5.20.9 Connectors

Fri, 09 Sep 2022 12:00:00 GMT

LDAP Connector

1.5.20.8 Connectors

Wed, 24 Aug 2022 17:39:00 GMT

CSV File Connector

1.5.20.7 Connectors

Mon, 06 Jun 2022 12:00:00 GMT

AWS Connector

1.5.20.6 Connectors

Thu, 05 May 2022 12:00:00 GMT

Cerner Connector

1.5.20.5 Connectors

Mon, 14 Feb 2022 12:00:00 GMT

Adobe Marketing Cloud Connector

1.5.20.4 Connectors

Wed, 08 Dec 2021 12:00:00 GMT

Google Apps Connector

1.5.20.3 Connectors

Mon, 22 Nov 2021 12:00:00 GMT

Database Table Connector

1.5.20.2 Connectors

Tue, 27 Jul 2021 12:00:00 GMT

CSV File Connector

1.5.20.1 Connectors

Fri, 28 May 2021 12:00:00 GMT

1.5.20.1 is a limited release, where only the Database Table Connector was released to Backstage.

Database Table Connector

1.5.20.0 Connectors

Fri, 16 Apr 2021 12:00:00 GMT

Generic LDAP Connector

1.5.19.6 Connectors

Fri, 26 Feb 2021 12:00:00 GMT

No issues specific any connectors were addressed in this release.

1.5.19.5 Connectors

Fri, 12 Feb 2021 12:00:00 GMT

CSV File Connector

1.5.19.4 Connectors

Fri, 22 Jan 2021 12:00:00 GMT

No issues specific any connectors were addressed in this release.

1.5.19.3 Connectors

Sun, 13 Dec 2020 12:00:00 GMT

Microsoft Graph API Connector

1.5.19.2 Connectors

Mon, 30 Nov 2020 12:00:00 GMT

Generic LDAP Connector

1.5.19.1 Connectors

Wed, 18 Nov 2020 12:00:00 GMT

Microsoft Graph API Connector

1.5.19.0 Connectors

Tue, 20 Oct 2020 12:00:00 GMT

Starting in version 1.5.19.0, ICF connectors that previously had external library dependencies now have those dependencies bundled inside the connector.

Initial release of the MS Graph API Connector.

Generic LDAP Connector

1.5.18.0 Connectors

Mon, 14 Sep 2020 12:00:00 GMT

Starting in version 1.5.18.0, the ICF Connector Framework and all connectors bundled with IDM share a unified version number.

No issues specific any connectors were addressed in this release.

1.5.20.36 Java RCS

Wed, 26 Aug 2026 04:08:15 GMT

OPENICF-2180: The Java RCS now caches and shares a single OAuth access token across all IDM instances that use the same connection manager, instead of requesting a separate token for each instance. Learn more in Changed functionality.
OPENICF-3615: Fixed an issue where a hung OAuth token refresh with no read timeout could permanently block all WebSocket upgrades to an Advanced Identity Cloud tenant.
OPENICF-3618: Fixed an issue where a hostId-scoped operation’s periodic control message omitted requests routed by hostId, causing long-running hostId-routed operations, such as paged reconciliation searches, to be marked inconsistent and hang indefinitely.
OPENICF-3681: The RCS now supports Basic proxy authentication when connecting through an HTTP proxy that also advertises Negotiate and NT (New Technology) LAN Manager (NTLM) authentication schemes.

1.5.20.35 Java RCS

Tue, 09 Jun 2026 15:16:23 GMT

OPENICF-3442: The RCS default truststore format has changed from JKS to PKCS12, aligning with IDM.

1.5.20.34 Java RCS

Thu, 26 Mar 2026 16:23:42 GMT

No public changes were made to Java RCS, though a new version was released.

1.5.20.33 Java RCS

Tue, 10 Mar 2026 11:35:00 GMT

OPENICF-3349: The RCS resolves DNS names each time it establishes a new WebSocket connection.
OPENICF-3366: The pingpongInterval and groupCheckInterval can now be set to 0. Learn more in RCS configuration properties.

1.5.20.32 Java RCS

Tue, 30 Sep 2025 17:00:00 GMT

OPENICF-3369: The Java RCS now supports Java 21. Learn more in Install Java RCS.
OPENICF-3275: The connectorserver.loggingConfigFile property has been removed from ConnectorServer.properties. To specify a custom logback configuration file, set the LOGGING_CONFIG system property to the location of your logback.xml file.

Learn more in Logging configuration file.

1.5.20.31 Java RCS

Tue, 02 Sep 2025 17:00:00 GMT

OPENICF-3255: The Java RCS now sets and uses a default temp directory location within the RCS installation folder.

1.5.20.30 Java RCS

Mon, 07 Jul 2025 11:35:00 GMT

OPENICF-2272: The Java RCS download now includes a sample dockerfile at path/to/openicf/docker/Dockerfile. Learn more in Deploy Java RCS in a Docker container.

1.5.20.29 Java RCS

Wed, 23 Apr 2025 11:35:00 GMT

OPENICF-1724: Fixed error message when uninstalling non-existent Java RCS Windows service.

1.5.20.28 Java RCS

Thu, 27 Feb 2025 11:46:00 GMT

OPENICF-2153: Ability to output CAUD_TRANSACTION_ID in the RCS logs.
OPENICF-2616: The default truststore is now the RCS security/trustStore previously introduced by OPENICF-2152.
OPENICF-2970: Simplified default ConnectorServer.properties and added sample configurations available in conf/samples:
- ConnectorServer.properties.cloud-client
- ConnectorServer.properties.default-parameters
- ConnectorServer.properties.onprem-client
- ConnectorServer.properties.onprem-server
OPENICF-2972: Removed the /setDefaults command.

1.5.20.27 Java RCS

Thu, 09 Jan 2025 16:00:00 GMT

OPENICF-2969: The default RCS webSocketConnections are reduced from 3 to 2.

1.5.20.26 Java RCS

Fri, 06 Dec 2024 15:16:00 GMT

OPENICF-2942: You can launch Java RCS in a Docker container with multiple values (comma-separated) defined for connectorserver.url in OPENICF_OPTS.

1.5.20.23 Java RCS

Thu, 01 Aug 2024 19:24:00 GMT

Java 17 required

Running Java RCS requires Java 17.

More bundled connectors

Java RCS now bundles the following additional connectors:

AS400
Cerner
Epic
IBM RACF
MongoDB
Oracle EBS
Peoplesoft
SAP
SAP HANA DB

1.5.20.22 Java RCS

Fri, 21 Jun 2024 16:50:00 GMT

OPENICF-2640: If remote IDM process is stopped, Websocket connections increase until IDM process is back.

1.5.20.21 Java RCS

Tue, 19 Mar 2024 12:46:00 GMT

OPENICF-2228: logback.xml moved to conf/ directory.
OPENICF-2152: Provide a default SSL truststore file.
OPENICF-2511: Connection to IDM becomes dysfunctional after a period of inactivity in RCS.
OPENICF-2643: Timeout waiting to acquire a websocket to send a message has been decreased from 2 minutes to 30 seconds.
OPENICF-2644: NPE may be thrown on WebSocketConnectionGroup shutdown.
OPENICF-2154: RCS now logs any connector exception to the log file and console.

1.5.20.18 Java RCS

Fri, 17 Nov 2023 15:41:00 GMT

OPENICF-1638: The default logback.xml logging configuration rolls log files daily. Refer to Rolling log policy.
OPENICF-2547: New local connector facade created --> Method: newConnectorFacadeInstance.

1.5.20.15 Java RCS

Fri, 12 May 2023 12:51:00 GMT

OPENICF-2336: Java RCS: Change the default connector.groupCheckInterval=900 seconds to 60 seconds.

1.5.20.14 Java RCS

Mon, 20 Mar 2023 12:00:00 GMT

OPENICF-1418: Java RCS: Invalid interval properties not handled properly for client mode.
OPENICF-2181: Java RCS: Housekeeping task should log which endpoint/instance it is working with.
OPENICF-2274: Java RCS: Response to unknown protobuf request should contain RCS version.

1.5.20.12 Java RCS

Fri, 09 Dec 2022 17:39:00 GMT

OPENICF-1473: Java RCS: ConnectorServer.properties template should include config for FRAAS.
OPENICF-1889: Java RCS: Include relevant defaults for RCS config.

1.5.20.11 Java RCS

Tue, 01 Nov 2022 17:39:00 GMT

OPENICF-2132: Java RCS: docker-entrypoint.sh uses -run instead of -service to start the RCS.
OPENICF-2137: Java RCS: When running in -service mode, version is not displayed at startup.
OPENICF-2174: Java RCS: Incompatible with AM macaroons: Unrecognized field "expireTime".

1.5.20.9 Java RCS

Fri, 09 Sep 2022 12:00:00 GMT

Bundled connectors were updated, though no changes to the remote connector server were made.

1.5.20.8 Java RCS

Wed, 24 Aug 2022 17:39:00 GMT

OPENICF-2000: potential log flooding resulting from operation cancel request messages for LocalOperations which have already completed.

1.5.20.7 Java RCS

Mon, 06 Jun 2022 12:00:00 GMT

OPENICF-1883: Java RCS: Improve stability of RCS WebSocket connection management.
OPENICF-1975: Java RCS: Increase default heap size from 512m to 1g.
OPENICF-1925: Java RCS: require explicitly set property to enable agent deployment.

1.5.20.6 Java RCS

Thu, 05 May 2022 12:00:00 GMT

OPENICF-1832: Java RCS: High CPU usage when running as a service.

1.5.20.5 Java RCS

Mon, 14 Feb 2022 12:00:00 GMT

OPENICF-1855: Investigate handling query 'poison pill' termination via recon automatic retry upon exception receipt.

1.5.20.4 Java RCS

Wed, 08 Dec 2021 12:00:00 GMT

OPENICF-1726: Java RCS: OAuth access token should be cached and reused till expired.
OPENICF-1744: Java RCS: Unable to run RCS with Marketo connector using a different groovy version.
OPENICF-1796: Java RCS: NPE if connectorserver.url has a bad hostname

1.5.20.3 Java RCS

Mon, 22 Nov 2021 12:00:00 GMT

OPENICF-1725: Java RCS: classPath issue in JAVA_DLL when running as a service on Windows.
OPENICF-1730: Client ConnectorInfos cache not refreshed upon RCS instance restart when using RCS Agent.
OPENICF-1743: Java RCS: windows service starts up and stops abruptly.
OPENICF-1751: Sporadic issues managing RCS-hosted connectors through IDM Native Admin Console.
OPENICF-1783: Java RCS: Rename the windows service name.
OPENICF-1792: Java RCS: message hostId missing and causing a connection drop.
OPENICF-1746: Java RCS: Should display its current version in console and jar files should have their version in file name.
OPENICF-1764: Java RCS: on Windows, ConnectorServer.bat /setKey does not work.
OPENICF-1774: Java RCS: upgrade Procrun to latest version for RCS as a Windows service.

1.5.20.2 Java RCS

Tue, 27 Jul 2021 12:00:00 GMT

OPENICF-1655: Java RCS: When using TLS, the RCS does not work behind a proxy.

1.5.20.0 Java RCS

Fri, 16 Apr 2021 12:00:00 GMT

OPENICF-1366: Java Connector Server: /setDefaults does not revert config to default properly.
OPENICF-1502: RCS: requests not cancelled when websocket closes.
OPENICF-1540: RCS: requests bearer token from AM, but doesn’t look for error status code in response.
OPENICF-1544: Fix double-checked locking in WebSocketConnectionGroup.
OPENICF-1549: Update default ConnectorServer.properties.
OPENICF-1555: Clarify locking behavior in ConnectorServer for Grizzly server lifecycle.
OPENICF-1561: RCS: Reduce log level for common debug messages.

1.5.19.6 Java RCS

Fri, 26 Feb 2021 12:00:00 GMT

OPENIDM-16178: IDM recon would fail w/ remote Java connector server.

1.5.19.5 Java RCS

Fri, 12 Feb 2021 12:00:00 GMT

OPENICF-1516: Failed ICF Search Query confuses total number of search results.
OPENICF-1520: Java RCS: Connection groups can accumulate many more websockets than they should have.

1.5.19.4 Java RCS

Fri, 22 Jan 2021 12:00:00 GMT

OPENICF-1485: Java RCS: Non operational ConnectionGroup should be closed and removed.
OPENICF-1486: Java RCS: Connection housekeeping task may stop running.
OPENICF-1494: Java RCS: Housekeeping task gets blocked.
OPENICF-1500: Java RCS: Improve default logging.

1.5.19.3 Java RCS

Sun, 13 Dec 2020 12:00:00 GMT

OPENICF-1482: Java RCS: fails to reestablish connections to IDM after IDM is restarted.

1.5.19.2 Java RCS

Mon, 30 Nov 2020 12:00:00 GMT

OPENICF-1467: RCS: endless loops on connection loss and shutdown.

1.5.19.1 Java RCS

Wed, 18 Nov 2020 12:00:00 GMT

No issues specific to the Remote Connector Server were addressed in this release.

1.5.19.0 Java RCS

Tue, 20 Oct 2020 12:00:00 GMT

OPENICF-1393: Java Connector Server: useSSL property use should be clarified.
OPENICF-1394: missing connectorserver.scope in connectorserver property file.
OPENICF-1395: Investigate and clean up the following start up error message.
OPENICF-1397: Java Connector Server: javax.net.ssl trustStore and keyStore properties should be set.
OPENICF-1399: restarting IDM with active RCS causes RCS to decrement websocket connection count.
OPENICF-1400: Java Connector Server: Property name usessl should match docs and code.
OPENICF-1404: Java connector server proxy config for port is incorrect.
OPENICF-1407: Java RCS: Incorrect url in Debug message of HttpRequestPacket header for non-SSL.
OPENICF-1408: Java RCS: NPE when we set proxyHost for client mode.

1.5.18.0 Java RCS

Mon, 14 Sep 2020 12:00:00 GMT

OPENICF-1371: Java Connector server does not always reestablish closed websockets.
OPENICF-1390: Java RCS: Prevent use of websockets that are about to be closed.
OPENICF-1392: Java Connector Server: TTL should be in seconds.

1.5.7.0 .NET RCS

Thu, 02 Feb 2023 13:33:00 GMT

Connection improvements

.NET RCS should be able to initiate connection to IDM (OPENICF-731)
Client mode should support IDM authentication (OPENICF-1311)
Unable to start in client mode when no intervals used (OPENICF-1314)
When we attempt to stop in client mode, the connection is re-initiated (OPENICF-1315)
ConnectorObject should default the Name to Uid if Name is not present (OPENICF-1318)
Add the ability to connect to multiple IDM endpoints (OPENICF-1376)
Connection TTL should be in seconds (OPENICF-1626)
ConnectionGroup fixes for improved connection handling (OPENICF-1630)
Handle failure HTTP status codes when requesting OAuth 2.0 tokens (OPENICF-1631)
Fix handshake timing problem (OPENICF-1682)
Prevent use of websockets that are about to be closed (OPENICF-1685)
Ensure that IDM gets notification that a websocket is about to be closed (OPENICF-1700)
Stagger connection starts if webSocketConnections > 1 (OPENICF-1706)
SocketClosingSoonException introduces null values that break protobuf3 (OPENICF-2001)
Improve stability of RCS WebSocket connection management (OPENICF-2008)
If OAuth token endpoint is defined, .NET RCS still tries to use Basic Auth to connect to ID Cloud (OPENICF-2188)
Support for HTTP proxy authentication (OPENICF-2197)
Closing WebSockets are not handled properly (OPENICF-2217)

Configuration improvements

Separate config properties in the ConnectorServerService.exe.Config (OPENICF-1313)
Make Pong interval configurable (OPENICF-1362)
Update default properties values (OPENICF-1628)
Support for hostId (OPENICF-1512)
Align HTTP proxy property names with Java RCS (OPENICF-2204)

PowerShell connector now included with .NET connector server

Embed the PowerShell connector with the .NET connector server (OPENICF-1906)
Align PowerShell connector version number with the .NET RCS version (OPENICF-1962)
Integrate the PowerShell samples in the project (OPENICF-1970)
PowerShell connector: Query might return HTTP 500 when sorting by some properties (OPENICF-2205)
AD PowerShell samples should filter __NAME__ as a sort key (OPENICF-2172)

Dependency updates and cleanup

Update and cleanup some dependencies. (OPENICF-1963, OPENICF-1971)
Upgrade protocol buffer version and package (OPENICF-1836, OPENICF-2173)
Upgrade .NET framework (OPENICF-1707)
Fix the Wix project, get rid of legacy dlls (OPENICF-1913)
Exception upon start due to a missing dependency (OPENICF-1951)

General fixes and improvements

Sporadic issues managing RCS-hosted connectors through IDM Native Admin Console (OPENICF-2011)
Query filter on name attribute with pageSize and pagedResultsCookie returns HTTP 500 (OPENICF-1954)
PagedResultsCookie should be set to null if empty when deserialized from protobuf message (OPENICF-1679)

ICF release notes | ICF 1.5.20.36

1.5.20.36 Framework

1.5.20.35 Framework

1.5.20.34 Framework

1.5.20.33 Framework

1.5.20.32 Framework

1.5.20.31 Framework

1.5.20.30 Framework

1.5.20.29 Framework

1.5.20.28 Framework

1.5.20.26 Framework

1.5.20.25 Framework

1.5.20.24 Framework

1.5.20.23 Framework

1.5.20.22 Framework

1.5.20.21 Framework

1.5.20.18 Framework

1.5.20.15 Framework

1.5.20.11 Framework

1.5.20.8 Framework

1.5.20.7 Framework

1.5.20.6 Framework

1.5.20.5 Framework

1.5.20.4 Framework

1.5.20.3 Framework

1.5.20.0 Framework

1.5.19.6 Framework

1.5.19.5 Framework

1.5.19.4 Framework

1.5.19.3 Framework

1.5.19.2 Framework

1.5.19.1 Framework

1.5.19.0 Framework

1.5.18.0 Framework

1.5.20.36 Connectors

Updated connectors with change details

Updated connectors without change details

1.5.20.35 Connectors

Updated connectors with change details

Updated connectors without change details

1.5.20.34 Connectors

Updated connectors with change details

Updated connectors without change details

1.5.20.33 Connectors

New connectors

Updated connectors with change details

Updated connectors without change details

1.5.20.32 Connectors

Updated connectors with change details

Dropbox connector (SaaS common)

SaaS REST Connector (SaaS common)

Updated connectors without change details

1.5.20.31 Connectors

Updated connectors with change details

Updated connectors without change details

1.5.20.30 Connectors

Updated connectors with change details

Updated connectors without change details

1.5.20.29 Connectors

New connectors

Updated connectors with change details

1.5.20.28 Connectors

New connectors

Updated connectors with change details

Updated connectors without change details

1.5.20.27 Connectors

Updated connectors with change details

1.5.20.26 Connectors

New connectors

Updated connectors with change details

MongoDB connector (Scripted Groovy)

Updated connectors without change details

1.5.20.23 Connectors

New connectors

Updated connectors with change details

Adobe Admin Console connector (SaaS common)

Webex Connector (SaaS common)

Dropbox connector ^{(SaaS common)}

SaaS REST Connector ^{(SaaS common)}

MongoDB connector ^{(Scripted Groovy)}

Adobe Admin Console connector ^{(SaaS common)}

Webex Connector ^{(SaaS common)}