--- title: Server overview description: "Learn about PingAM's centralized access management architecture, modular design, and distribution components for deploying authentication, authorization, and federation services" component: pingam version: 8 page_id: pingam:deployment-planning:am-server-overview canonical_url: https://docs.pingidentity.com/pingam/8.1/deployment-planning/am-server-overview.html llms_txt: https://docs.pingidentity.com/pingam/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: 2026-06-01T14:34:20Z keywords: ["deployment", "planning", "architecture"] page_aliases: ["deployment-planning-guide:am-server-overview.adoc"] superseded_by: https://docs.pingidentity.com/pingam/8.1/deployment-planning/am-server-overview.html --- # Server overview AM is a centralized access management server, securing protected resources across the network and providing authentication, authorization, Web security, and federation services in a single, integrated solution. AM manages access to the protected resources by controlling who has access, when, how long, and under what conditions. It centralizes disparate hardware and software services for cloud, enterprise, mobile, and business-to-business (B2B) systems. ![AM has a highly modular and flexible architecture.](_images/openam-architecture-dpg.svg)Figure 1. Architecture AM features a highly modular and flexible architecture with multiple plugin points to meet any customer deployment. It leverages industry standard protocols, such as HTTP, XML, SOAP, REST, SAML 2.0, OAuth 2.0, OpenID Connect 1.0, and so forth to deliver a high performance, highly scalable, and highly available access management solution over the network. AM services are 100% Java-based, proven across multiple platforms and containers in many production deployments. AM core server can be deployed and integrated within existing network infrastructures. AM provides the following distribution files: **Distribution Files** | File | Description | | -------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `AM-8.0.2.war` | The distribution `.war` file includes the core server code and an administrative graphical user interface (GUI) Web console.During installation, the `.war` file accesses properties to get the fully qualified domain name, port, context path, and the location of the configuration folder. These properties can be retrieved from the `boot.json` file in the AM installation directory, from environment variables, or from a combination of the two.This file is also available to download individually. | | `AM-crypto-tool-8.0.2.war` | A utility with some cryptographic functionality used for creating Docker images. Strictly for future use, not currently supported. | | `AM-SSOAdminTools-5.1.3.30.zip` | A command-line tool (`ssoadm`) that lets administrators configure and maintain AM and create custom configuration scripts.The `.zip` distribution archive contains binaries, properties file, script templates, and setup scripts for UNIX and Windows servers. This command-line utility is deprecated and will be removed in a future AM release. | | `AM-SSOConfiguratorTools-5.1.3.30.zip` | Configuration and upgrade tools for installing and maintaining your server.The `zip` distribution file contains libraries, legal notices, and supported binaries for these configuration tools. It also contains example configuration and upgrade properties files you can use as templates in your deployment. This command-line utility is deprecated and will be removed in a future AM release. | | `Config-Upgrader-8.0.2.zip` | Configuration file upgrade tool.Find more information on converting configuration files for import into AM in the `README.md` file in the `Config-Upgrader-8.0.2.zip` file. | | `Fedlet-8.0.2.zip` | An AM Fedlet, a light-weight SAML 2.0 service provider.The Fedlet lets you set up a federated deployment without the need of a fully-featured service provider. | | `IDPDiscovery-8.0.2.war` | An IdP Discovery Profile (SAMLv2 binding profile) for its IdP Discovery service. The profile keeps track of the identity providers for each user. | | `sample-trees-8.0.2.zip` | Sample authentication trees for demonstration purposes. The trees are provided as JSON files and can be imported into an AM deployment using *Amster*. Find information on importing files using Amster in [Import configuration data](../amster/import-config.html). | | `Truststore-Utility-8.0.2.zip` | A utility to help with creating a trust store for use with web authentication.Find more information in the `readme.md` in the `.zip` archive and [MFA: Web authentication (WebAuthn) and passkeys](../am-authentication/authn-mfa-webauthn.html). | (1) AM also provides REST-based STS endpoints that you can use directly on the AM server. The [Ping Identity Download Center](https://backstage.pingidentity.com/downloads) hosts downloadable versions of AM, including a `.zip` file with all of the AM components, the `.war` file, AM tools, the configurator, web and Java agents, and documentation. Verify that you review the Software License and Subscription Agreement presented before you download AM files. Ping Identity offers the services you need to deploy AM commercial builds into production, including training, consulting, and support.