Connector release notes
Release notes for the connectors that are supported with ForgeRock® Identity Management software. These release notes cover changes to connectors that have been released since ICF 1.5.18.0.
|
Connectors continue to be released outside the IDM release. Release notes for the latest versions of ICF connectors are available here. |
These release notes cover the ICF connector releases that are supported in a deployment of ForgeRock Identity Management.
The releases listed in this document cover the connector releases since ICF 1.5.18.0. In most cases, these releases are backwards compatible with previous versions of IDM. Check the IDM / ICF Compatibility Matrix for your version of IDM for compatibility before installing a new version of a connector.
This document does not describe all ICF connectors. Additional connectors are available from the ForgeRock BackStage download site. If a connector release is listed here, but is not yet on the site, contact ForgeRock Support for access.
ForgeRock Identity Platform™ serves as the basis for our simple and comprehensive Identity and Access Management solution. We help our customers deepen their relationships with their customers, and improve the productivity and connectivity of their employees and partners. For more information about ForgeRock and about the platform, see https://www.forgerock.com.
The ForgeRock Common REST API works across the platform to provide common ways to access web resources and collections of resources.
Release notes overview
|
Connectors continue to be released outside the IDM release. Release notes for the latest versions of ICF connectors are available here. |
|
Starting in version 1.5.18.0, the ICF Connector Framework and all connectors bundled with IDM or the Remote Connector Server share a unified version number. |
| Version | Product | Date |
|---|---|---|
1.5.20.12 |
2022/12/09 |
|
1.5.20.11 |
2022/11/01 |
|
1.5.20.9 |
2022/09/09 |
|
1.5.20.8 |
2022/08/08 |
|
1.5.20.7 |
2022/06/06 |
|
1.5.20.6 |
2022/05/05 |
|
1.5.20.5 |
2022/02/14 |
|
1.5.20.4 |
2021/12/08 |
|
1.5.20.3 |
2021/11/22 |
|
1.5.20.2 |
2021/07/27 |
|
1.5.20.1 |
2021/05/28 |
|
1.5.20.0 |
2021/04/16 |
|
1.5.19.6 |
2021/02/26 |
|
1.5.19.5 |
2021/02/12 |
|
1.5.19.4 |
2021/01/22 |
|
1.5.19.3 |
2020/12/13 |
|
1.5.19.2 |
2020/11/30 |
|
1.5.19.1 |
2020/11/18 |
|
1.5.19.0 |
2020/10/20 |
|
1.5.18.0 |
2020/09/14 |
Connector changes
|
Connectors continue to be released outside the IDM release. Release notes for the latest versions of ICF connectors are available here. |
Refer to Connector framework changes for details regarding any changes to the ICF Connector Framework that may affect connector behavior.
1.5.20.12
AS400 Connector
Initial release of the AS400 connector. Refer to AS400 connector for more information.
Google Apps connector
-
OPENICF-2192: NPE when updating LicenseAssignments through a user update
-
OPENICF-2117: Hide Alternate Emails from the schema
-
OPENICF-2195: Intermittent NPE when we try to read newly created user
LDAP connector
-
OPENICF-400: LDAP connector should be able to properly handle reading the AD tokenGroups attribute
PeopleSoft connector
-
OPENICF-2033: PeopleSoft Connector v2.0
SAP connector
-
OPENICF-2183: Exception when SAP connector is running in OpenIDM
SAP SuccessFactors connector
-
OPENICF-2007: SAP SuccessFactors v2
SCIM connector
-
OPENICF-1916: Support for throttling
-
OPENICF-2207: Ability to define Accept: and Content-Type: HTTP headers
Workday connector
-
OPENICF-2030: Connector breaks when workerID is empty when using RCS
-
OPENICF-2150: Ability to add field and parameter to the request criteria
1.5.20.11
Adobe Marketing Cloud connector
No public changes were made specific to this connector, though a new version was released.
AWS connector
No public changes were made specific to this connector, though a new version was released.
Box connector
No public changes were made specific to this connector, though a new version was released.
Cerner connector
-
OPENICF-1960: Cerner Connector v2
CSV connector
No public changes were made specific to this connector, though a new version was released.
DocuSign connector
No public changes were made specific to this connector, though a new version was released.
Epic connector
No public changes were made specific to this connector, though a new version was released.
GCP connector
Initial release of the GCP connector. Refer to Google Cloud Platform connector for more information.
-
OPENICF-1749: GCP Connector
Google Apps connector
-
OPENICF-2039: GoogleApps Connector: missing some user attributes
-
OPENICF-2040: GoogleApps Connector: Manage role attributes
-
OPENICF-2041: GoogleApps Connector: Group attributes
-
OPENICF-2064: Google Apps Connector: Query the Google Workspace instance for Licenses
-
OPENICF-2066: GoogleApps Connector: Ability to query Roles and RoleAssignments
-
OPENICF-2136: Google Apps Connector: Exponential Back off for reading google objects required
HubSpot connector
No public changes were made specific to this connector, though a new version was released.
IBM RACF connector
-
OPENICF-1762: IBM RACF API Connector
|
There was a previous RACF connector, which is deprecated. Users of the previous RACF connector should migrate to the new connector. |
LDAP connector
-
OPENICF-1856: LDAP Connector: Assignment of static group to IDM User fails to assign it on LDAP side if user is already a member of a Dynamic Group on LDAP side
-
OPENICF-2089: LDAP Connector: ldapGroups membership does not take into account nested membership of other groups
-
OPENICF-2108: LDAP Connector: slow group membership updates with unindexed member/uniqueMember attributes in DS
-
OPENICF-2126: Assignment Issue: Managed User to DS Groups Failure to Select Target Group
Marketo connector
No public changes were made specific to this connector, though a new version was released.
Microsoft Graph API connector
-
OPENICF-2068: MSGraphAPI Connector: Implement Azure AD Directory Roles support
-
OPENICF-2088: MSGraphAPI Connector: Implement Azure AD custom role creation
PeopleSoft connector
No public changes were made specific to this connector, though a new version was released.
Salesforce connector
No public changes were made specific to this connector, though a new version was released.
SAP S/4HANA connector
No public changes were made specific to this connector, though a new version was released.
SAP SuccessFactors connector
No public changes were made specific to this connector, though a new version was released.
SCIM connector
-
OPENICF-2112: SCIM Connector: caseSensitive
-
OPENICF-2113: SCIM Connector: problem with "issuedAt" from OAuth neg
-
OPENICF-2114: SCIM Connector: use authenticationBasic as an option for OAuth neg
-
OPENICF-2125: SCIM Connector: Fix Filter
Scripted REST connector
No public changes were made specific to this connector, though a new version was released.
ServiceNow connector
-
OPENICF-2130: ServiceNow connector query results do not match what is returned from API
Workday connector
No public changes were made specific to this connector, though a new version was released.
1.5.20.9
LDAP Connector
No public changes were made specific to this connector, though a new version was released.
Microsoft Graph API Connector
-
OPENICF-1614: MS Graph API Connector: Livesync on user/group does not populate membership
-
OPENICF-1858: MS Graph API Connector: Add Group Owners management
SAP Connector
-
OPENICF-1675: SAP Connector: Groovy deps should be embedded
-
OPENICF-2071: SAP Connector: Cannot update ACTIVITY GROUPS for users
1.5.20.8
CSV File Connector
-
OPENICF-1935: CSV Connector: generates a stacktrace for Read Only permission files
-
OPENICF-1969: CSV Connector: Update csv connector parsing library
-
OPENICF-1258: CSV Connector: stripping empty strings, replacing with nulls.
DatabaseTable Connector
No public changes were made specific to this connector, though a new version was released.
Google Apps Connector
-
OPENICF-2038: Google Apps Connector: Updating user’s group membership may return NPE
LDAP Connector
-
OPENICF-1977: LDAP Connector: Detect CA LDAP directory server
Microsoft Graph API Connector
-
OPENICF-1606: MS Graph API Connector: Upgrade to MS Graph Java SDK v3
-
OPENICF-1807: MS Graph API Connector: Better handle failure of hard delete
-
OPENICF-1819: MS Graph API Connector: "performHardDelete" should be set to false by default
PeopleSoft Connector
No public changes were made specific to this connector, though a new version was released.
Salesforce Connector
-
OPENICF-2002: Salesforce Connector: syncFailureHandler can exceed maxRetries
ScriptedSQL Connector
No public changes were made specific to this connector, though a new version was released.
1.5.20.7
AWS Connector
Initial release of the AWS IAM connector. Refer to AWS connector for more information.
-
OPENICF-1780: AWS IAM Connector
DatabaseTable Connector
No public changes were made specific to this connector, though a new version was released.
Google Apps Connector
No public changes were made specific to this connector, though a new version was released.
LDAP Connector
-
OPENICF-1897: LDAP Connector: Add support for nested AD groups
MongoDB Connector
No public changes were made specific to this connector, though a new version was released.
PeopleSoft Connector
Initial release of the Oracle PeopleSoft connector. Refer to PeopleSoft connector for more information.
-
OPENICF-1748: PeopleSoft Connector
Salesforce Connector
-
OPENICF-1812: SalesForce Connector: syncFailureHandler maxRetries is not working
SAP S/4HANA Connector
Initial release of the SAP S/4HANA connector. Refer to SAP S/4HANA connector for more information.
-
OPENICF-1782: SAP Hana Connector
ScriptedSQL Connector
No public changes were made specific to this connector, though a new version was released.
1.5.20.6
Cerner Connector
Initial release of the Cerner connector. Refer to Cerner connector for more information.
-
OPENICF-1737: Cerner Connector
Epic Connector
-
OPENICF-1818: Epic V2 Connector
-
OPENICF-1878: Epic Connector: Query filter not matching uid returns HTTP 404
Google Apps Connector
-
OPENICF-1181: Google Apps Connector: Unable to delete custom attributes
LDAP Connector
-
OPENICF-1901: LDAP Connector: Reduce JVM garbage from ConnectorObjectBuilder and AttributeBuilder
MongoDB Connector
-
OPENICF-1833: Update MongoDB driver to the latest for compatibility with newer versions of MongoDB
1.5.20.5
Adobe Marketing Cloud Connector
No public changes were made specific to this connector, though a new version was released.
Database Table Connector
-
OPENICF-1711: Database Table Connector - ORA-22816 error when using Oracle trigger
Epic Connector
Initial release of the Epic connector. Refer to Epic connector for more information.
-
OPENICF-1750: Epic Connector
Google Apps Connector
-
OPENICF-1808: Google Apps Connector: when user is provisioned using a role assignment, group isn’t set correctly
LDAP Connector
-
OPENICF-1859: LDAP Connector: _memberId is not returned with AD & liveSync if attribute range is used
Marketo Connector
No public changes were made specific to this connector, though a new version was released.
Salesforce Connector
No public changes were made specific to this connector, though a new version was released.
SCIM Connector
No public changes were made specific to this connector, though a new version was released.
Scripted REST Connector
No public changes were made specific to this connector, though a new version was released.
Scripted SQL Connector
No public changes were made specific to this connector, though a new version was released.
SAP SuccessFactors Connector
-
OPENICF-1822: SuccessFactors should not require PEM formatted file on disk
1.5.20.4
Google Apps Connector
No public changes were made specific to this connector, though a new version was released.
Microsoft Graph API Connector
No public changes were made specific to this connector, though a new version was released.
1.5.20.3
Database Table Connector
-
OPENICF-1692: Database Table Connector: throwing a null pointer exception
Google Apps Connector
-
OPENICF-1716: Google Apps Connector: Add recoveryEmail and recoveryPhone attributes for User
LDAP Connector
-
OPENICF-1731: LDAP Connector: Escape characters (\) not properly handled on delete and updates ops
Scripted SQL Connector
No public changes were made specific to this connector, though a new version was released.
ServiceNow Connector
No public changes were made specific to this connector, though a new version was released.
Workday Connector
No public changes were made specific to this connector, though a new version was released.
1.5.20.2
CSV File Connector
-
OPENICF-1677: CSV Connector returns pagedResultsCookie for queries with _pageSize=0.
LDAP Connector
-
OPENICF-1666: LDAP Connector: ldapGroups should restrict membership to the specified contexts.
Microsoft Graph API Connector
-
OPENICF-1656: MS Graph API Connector: Unable to update onPremisesExtensionAttributes.
-
OPENICF-1687: MS Graph API Connector: Should be able to work behind an HTTP Proxy.
-
OPENICF-1698: MS Graph API Connector: get the cause of exception if test() fails.
Workday Connector
-
OPENICF-1689: Workday Connector: Workers transaction logs are filtered.
-
OPENICF-1691: Workday Connector: Reduce Garbage collection when building connector objects.
1.5.20.1
|
1.5.20.1 is a limited release, where only the Database Table Connector was released to Backstage. |
Database Table Connector
-
OPENICF-1477: Database Table Connector: ORA-01000: maximum open cursors exceeded
-
OPENICF-1596: PSQLException: FATAL: terminating connection due to idle-in-transaction timeout
1.5.20.0
Generic LDAP Connector
-
OPENICF-1560: LDAP Connector: RFE Disable Paged Results Control
-
OPENICF-1586: LDAP Connector: Timestamp sync strategy: Synchronization filters are not used properly
MongoDB Connector
-
OPENICF-1553: MongoDB Connector: convertBSONtoICF() does not traverse Arrays.
Microsoft Graph API Connector
-
OPENICF-1538: MS Graph API Connector: Sync() does not work
-
OPENICF-1541: MS Graph API Connector: Add ConsistencyLevel: eventual' header and $count=true for endsWith filter
-
OPENICF-1557: MS Graph API Connector: Handle user employeeHireDate attribute and Calendar data type
-
OPENICF-1558: MS Graph API Connector: Make sure sortKey is supported by the objectClass
-
OPENICF-1559: MS Graph API Connector: Implement Authenticate() call
-
OPENICF-1595: MS Graph API Connector: test() should connect to the MS Graph endpoint to validate the connectionThe following known issues will be addressed in a later release:
-
OPENICF-1614: MS Graph API Connector: Livesync on user/group does not populate membership
-
OPENICF-1615: MS Graph API Connector: Deleting Azure AD group works but throws HTTP 500
SCIM Connector
-
OPENICF-1589: SCIM Connector: NPE caused by exception not properly handled
-
OPENICF-1591: SCIM Connector: Parsing OAuth response should not fail on unknown properties
-
OPENICF-1598: SCIM Connector: NPE when updating attribute with null value
-
OPENICF-1600: SCIM Connector: unknown attributes in a query result should not throw parsing exception
-
OPENICF-1601: SCIM Connector: Implement a global connection timeout property
1.5.19.5
CSV File Connector
-
OPENICF-1530: system?_action=createFullConfig validation does not return consistent errors
Database Table Connector
-
OPENICF-1510: Errors in Database Table Connector docs
Groovy Connector Toolkit
-
OPENICF-1523: ScriptedGroovy connectors fail to load in IDM 7.x when embedded Groovy version does not match IDM Groovy version
Microsoft Graph API Connector
-
OPENICF-1493: MS Graph API Connector: add the ability to read/assign license for the user
-
OPENICF-1499: MS Graph API Connector: remove the maximumConnections property
-
OPENICF-1507: MS Graph API Connector: add the ability to read subscribedSku object
-
OPENICF-1525: MS Graph API Connector: replace the default Graph SDK logger
-
OPENICF-1526: MS Graph API Connector: add the ability to read Team objects
Salesforce Connector
-
OPENICF-1522: Salesforce Connector : implement StatefulConfiguration to allow persistence of accessToken in memory
SCIM Connector
-
OPENICF-1518: SCIM connector: Http client ConnectionManager is not set properly
Workday Connector
-
OPENICF-1504: Workday Connector: SyncToken should be updated even if no events
-
OPENICF-1506: Workday Connector: SyncToken should be set to tenant timestamp after call to sync()
-
OPENICF-1508: Workday Connector: Query on SCR objects should not include date range as a search criteria
1.5.19.3
Microsoft Graph API Connector
-
OPENICF-1475: MS Graph API Connector: the 'manager' only returns the id and not the full object
-
OPENICF-1481: MS Graph API Connector: add the ability to assign/remove user’s manager
-
OPENICF-1483: MS Graph API Connector: can’t remove all groups a user belongs to
Salesforce Connector
-
OPENICF-1471: SalesForce Connector: should not implement PoolableConnector interface
1.5.19.2
Generic LDAP Connector
-
OPENICF-1448: LDAP Connector: Enabling changelog livesync for oracle unified directory (OUD)
-
OPENICF-1466: LDAP Connector: Update filterWithOrInsteadOfAnd to apply to timestamp and Active Directory liveSync
-
OPENICF-1470: LDAP Connector: Null Check in ADUserAccounControl.addControl
-
OPENICF-1472: LDAP Connector: Data not synced from AD to IDM via livesync on ALL object
Microsoft Graph API Connector
-
OPENICF-1469: MS Graph API Connector: implement a read/write rate limiter
SCIM Connector
-
OPENICF-1401: SCIM Connector: Align exceptions for not configured (blank/null) configurationProperties
1.5.19.1
Microsoft Graph API Connector
-
OPENICF-1446: MS Graph API Connector: implement PoolableConnector
Salesforce Connector
-
OPENICF-1352: Salesforce connector: pagination and cookies not working properly
SCIM Connector
-
OPENICF-1444: SCIM connector - provide support for 'scope'
SSH Connector
-
OPENICF-1433: SSH connector: Kerberos username prompt for public key and password auth
-
OPENICF-1445: SSH connector: Stale or disconnected SSH sessions are not detected when borrowing from the pool
Workday Connector
-
OPENICF-1383: Workday Connector: Upgrade to API v35.0
-
OPENICF-1419: Workday Connector: Implement Service Center Representative object type
-
OPENICF-1426: Workday Connector: Ability to update email for Service Center Representative object
-
OPENICF-1432: Workday Connector: Implement OR filter
-
OPENICF-1447: Workday Connector: add the Contingent_Worker_ID as a search criteria
1.5.19.0
|
Starting in version 1.5.19.0, ICF connectors that previously had external library dependencies now have those dependencies bundled inside the connector. |
Initial release of the MS Graph API Connector.
Generic LDAP Connector
-
OPENICF-1388: LDAP Connector 1.5.5.0 throws java.lang.NoSuchMethodError on Java 8
-
OPENICF-1396: OPENIDM-15448 changes seemingly broke querying ldap via the data tab
Groovy Connector Toolkit
-
OPENICF-1414: Scripted Groovy (v3) based connectors fail to load with IDM releases prior to 7.0
Remote connector server changes
|
Connectors continue to be released outside the IDM release. Release notes for the latest versions of ICF connectors are available here. |
Refer to Connector framework changes for details regarding any changes to the ICF Connector Framework that may affect RCS behavior.
1.5.20.12
-
OPENICF-1473: Java RCS: ConnectorServer.properties template should include config for FRAAS
-
OPENICF-1889: Java RCS: Include relevant defaults for RCS config
1.5.20.11
-
OPENICF-2132: Java RCS: docker-entrypoint.sh uses -run instead of -service to start the RCS
-
OPENICF-2137: Java RCS: When running in -service mode, version is not displayed at startup.
-
OPENICF-2174: Java RCS: Incompatible with AM macaroons: Unrecognized field "expireTime"
1.5.20.9
Bundled connectors were updated, though no changes to the remote connector server were made.
1.5.20.8
-
OPENICF-2000: potential log flooding resulting from operation cancel request messages for LocalOperations which have already completed
1.5.20.7
-
OPENICF-1883: Java RCS: Improve stability of RCS WebSocket connection management
-
OPENICF-1975: Java RCS: Increase default heap size from 512m to 1g
-
OPENICF-1925: Java RCS: require explicitly set property to enable agent deployment
1.5.20.5
-
OPENICF-1855: Investigate handling query 'poison pill' termination via recon automatic retry upon exception receipt
1.5.20.4
-
OPENICF-1726: Java RCS: OAuth access token should be cached and reused till expired
-
OPENICF-1744: Java RCS: Unable to run RCS with Marketo connector using a different groovy version
-
OPENICF-1796: Java RCS: NPE if connectorserver.url has a bad hostname
1.5.20.3
-
OPENICF-1725: Java RCS: classPath issue in JAVA_DLL when running as a service on Windows
-
OPENICF-1730: Client ConnectorInfos cache not refreshed upon RCS instance restart when using RCS Agent
-
OPENICF-1743: Java RCS: windows service starts up and stops abruptly
-
OPENICF-1751: Sporadic issues managing RCS-hosted connectors through IDM Native Admin Console
-
OPENICF-1783: Java RCS: Rename the windows service name
-
OPENICF-1792: Java RCS: message hostId missing and causing a connection drop
-
OPENICF-1746: Java RCS: Should display its current version in console and jar files should have their version in file name
-
OPENICF-1764: Java RCS: on Windows, ConnectorServer.bat /setKey does not work
-
OPENICF-1774: Java RCS: upgrade Procrun to latest version for RCS as a Windows service.
1.5.20.2
-
OPENICF-1655: Java RCS: When using TLS, the RCS does not work behind a proxy.
1.5.20.0
-
OPENICF-1366: Java Connector Server: /setDefaults does not revert config to default properly
-
OPENICF-1502: RCS: requests not cancelled when websocket closes
-
OPENICF-1540: RCS: requests bearer token from AM, but doesn’t look for error status code in response
-
OPENICF-1544: Fix double-checked locking in WebSocketConnectionGroup
-
OPENICF-1549: Update default ConnectorServer.properties
-
OPENICF-1555: Clarify locking behavior in ConnectorServer for Grizzly server lifecycle
-
OPENICF-1561: RCS: Reduce log level for common debug messages
1.5.19.6
-
OPENIDM-16178: IDM recon would fail w/ remote Java connector server
1.5.19.5
-
OPENICF-1516: Failed ICF Search Query confuses total number of search results
-
OPENICF-1520: Java RCS: Connection groups can accumulate many more websockets than they should have
1.5.19.4
-
OPENICF-1485: Java RCS: Non operational ConnectionGroup should be closed and removed
-
OPENICF-1486: Java RCS: Connection housekeeping task may stop running
-
OPENICF-1494: Java RCS: Housekeeping task gets blocked
-
OPENICF-1500: Java RCS: Improve default logging
1.5.19.3
-
OPENICF-1482: Java RCS: fails to reestablish connections to IDM after IDM is restarted
1.5.19.2
-
OPENICF-1467: RCS: endless loops on connection loss and shutdown
1.5.19.0
-
OPENICF-1393: Java Connector Server: useSSL property use should be clarified
-
OPENICF-1394: missing connectorserver.scope in connectorserver property file
-
OPENICF-1395: Investigate and clean up the following start up error message
-
OPENICF-1397: Java Connector Server: javax.net.ssl trustStore and keyStore properties should be set
-
OPENICF-1399: restarting IDM with active RCS causes RCS to decrement websocket connection count
-
OPENICF-1400: Java Connector Server: Property name usessl should match docs and code
-
OPENICF-1404: Java connector server proxy config for port is incorrect
-
OPENICF-1407: Java RCS: Incorrect url in Debug message of HttpRequestPacket header for non-SSL
-
OPENICF-1408: Java RCS: NPE when we set proxyHost for client mode
1.5.18.0
-
OPENICF-1371: Java Connector server does not always reestablish closed websockets
-
OPENICF-1390: Java RCS: Prevent use of websockets that are about to be closed
-
OPENICF-1392: Java Connector Server: TTL should be in seconds
Connector framework changes
|
Connectors continue to be released outside the IDM release. Release notes for the latest versions of ICF connectors are available here. |
1.5.20.8
-
OPENICF-1998: Local/RemoteRequest congruence checks should throw a retryable exception upon failure
1.5.20.6
-
OPENIDM-17535: IDM stack releases that include bundled connectors should continue to work with existing provisioner configuration
1.5.20.5
-
OPENICF-1855: Investigate handling query 'poison pill' termination via recon automatic retry upon exception receipt
1.5.20.3
-
OPENICF-1704: Framework: resetConnectorInfos does not implement intent
-
OPENICF-1730: Client ConnectorInfos cache not refreshed upon RCS instance restart when using RCS Agent
-
OPENICF-1735: Upgrade to groovy 3.0.9
1.5.20.0
|
For a list of security issues addressed in this release, refer to the related Security Advisory in the ForgeRock Knowledge Base. |
-
OPENICF-1566: Framework: ICF Jetty servlet default maxMessageSize is too small
1.5.19.0
|
Starting in version 1.5.19.0, ICF connectors that previously had external library dependencies now have those dependencies bundled inside the connector. |
-
OPENICF-1413: Use framework version 1.5.11.0 for ldap-connector to support Java8-compatible release
-
OPENICF-1414: Scripted Groovy (v3) based connectors fail to load with IDM releases prior to 7.0