--- title: What’s new description: ForgeRock maintenance releases contain a collection of fixes and minor RFEs grouped together and released as part of our commitment to support our customers. For general information about ForgeRock's maintenance and patch releases, see Maintenance and Patch Availability Policy. component: pingidm version: 7.2 page_id: pingidm:release-notes:whats-new canonical_url: https://docs.pingidentity.com/pingidm/8.1/release-notes/whats-new.html llms_txt: https://docs.pingidentity.com/pingidm/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md superseded_by: https://docs.pingidentity.com/pingidm/8.1/release-notes/whats-new.html section_ids: maintenance_releases: Maintenance releases new_features: New features idm_7_2_2: IDM 7.2.2 support_for_upgrading_ds_to_later_version_than_idm: Support for upgrading DS to later version than IDM idm_7_2_1: IDM 7.2.1 idm_7_2_0: IDM 7.2.0 whats-new-prop-based-secret-stores: Property-based secret stores activate-deactivate-tasks: Scanning tasks to activate and deactivate accounts whats-new-sendTemplate-cc-bcc: external/email endpoint improvements whats-new-workflow: Workflow improvements policy_validation_for_field_removal: Policy validation for field removal relationship_derived_virtual_properties_rdvp_improvements: Relationship-derived Virtual Properties (RDVP) improvements ad_password_synchronization_plugin_utc_timestamps: AD Password Synchronization Plugin UTC timestamps bootstrap_idm_without_stored_configuration: Bootstrap IDM without stored configuration api_version_header_warnings: API version header warnings reconciliation_enhancements: Reconciliation enhancements assignment_synchronization_optimization: Assignment synchronization optimization query_filtering_on_arrays: Query filtering on arrays additional_metrics: Additional metrics security-advisories: Security advisories --- # What's new ## Maintenance releases ForgeRock maintenance releases contain a collection of fixes and minor RFEs grouped together and released as part of our commitment to support our customers. For general information about ForgeRock's maintenance and patch releases, see [Maintenance and Patch Availability Policy](https://backstage.forgerock.com/knowledge/kb/article/a47486518). IDM 7.2.2 is the latest release targeted for IDM 7.2 deployments, and can be downloaded from the [ForgeRock Download Center](https://backstage.forgerock.com/downloads/browse/idm/latest). | | | | - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | You can deploy the release as an initial deployment or as an update from an existing 7.2.x deployment. For information on updating from 7.2.x, refer to [Update to a maintenance release](../upgrade-guide/update-maintenance-release.html). | ## New features ## IDM 7.2.2 This release includes updates to ICF connectors, updates to dependency libraries, bug fixes, and the following new feature: ### Support for upgrading DS to later version than IDM Upgrading to DS 7.3 is now supported. For more information, refer to [Supported repositories](before-you-install.html#prerequisites-repositories). ## IDM 7.2.1 This release includes updates to ICF connectors, updates to dependency libraries, and bug fixes. ## IDM 7.2.0 This release of ForgeRock Identity Management software includes the following new features: ### Property-based secret stores IDM now supports *property-based secret stores* and can read keys and trusted certificates from properties that contain keys in Privacy-Enhanced Mail (PEM) format. For more information, see [Property-based secret stores](../security-guide/property-secret-stores.html). ### Scanning tasks to activate and deactivate accounts The default IDM configuration now includes two scanning tasks that *activate* and *deactivate* a user's `accountStatus`, based on their `activeDate` and `inactiveDate`. For more information, see [Activate and deactivate accounts](../schedules-guide/activate-deactivate-tasks.html). ### `external/email` endpoint improvements You can now use `cc` and `bcc` parameters with the `sendTemplate` action. For more information, see: * [openidm.action](../scripting-guide/scripting-func-ref.html#function-action) * [Outbound email](../external-services-guide/email.html) ### Workflow improvements The Flowable embedded workflow engine has been upgraded to version 6.6.0. This upgrade fixes the issue with [native email tasks](https://github.com/flowable/flowable-engine/issues/2343) previously mentioned in the [Workflow Guide](../workflow-guide/preface.html). ### Policy validation for field removal You can now [validate field removal](../objects-guide/policies-over-REST.html#validate_field_removal) using the policy action `validateProperty`. ### Relationship-derived Virtual Properties (RDVP) improvements [Relationship-derived Virtual Properties](../objects-guide/managed-object-virtual-properties.html#relationship-derived-virtual-properties) now include reference fields with details of the referenced relationship. ### AD Password Synchronization Plugin UTC timestamps The latest version of the Active Directory password synchronization plugin (v1.7.0) uses UTC timestamps for logs. ### Bootstrap IDM without stored configuration Previously, the property `openidm.fileinstall.enabled` also controlled the configs being loaded on startup. Therefore, to disable file monitoring, you had to first start IDM with it enabled in order to load the configs into the repository, and then restart IDM with it disabled. The new setting `openidm.config.bootstrap.enabled` (which defaults to `true`), allows file monitoring to be disabled, and the bootstrap process will load the configuration into the repository. For more information, see [Disable automatic configuration updates](../security-guide/disabling-auto-config-updates.html). ### API version header warnings IDM can now [log warnings](../rest-api-reference/rest-api-versioning.html#api_version_header_warnings) when API version headers are not specified. ### Reconciliation enhancements Reconciliation has been enhanced in the following ways: * Previously, if one node in the cluster went down or offline during a clustered reconciliation run, the reconciliation was canceled. This limitation no longer exists. For more information, see [Clustered reconciliation](../synchronization-guide/clustered-recon.html). * Addition of the properties: * `reconTargetQueryPaging` * `reconTargetQueryPageSize` For more information, see [Synchronization reference](../synchronization-guide/synchronization-ref.html#sync-object-mapping). ### Assignment synchronization optimization A new property has been added to synchronization mappings, `optimizeAssignmentSync`, which determines whether modifications to an assignment's attributes or relationships should be treated as a synchronization event for members of that assignment or role, or if it should only be treated as a synchronization event for members if the modified assignment is directly relevant to that mapping, or if `effectiveAssignments` is included in `triggerSyncProperties`. For more information, see [Synchronization reference](../synchronization-guide/synchronization-ref.html#sync-object-mapping). ### Query filtering on arrays For versions of IDM running DS or PostgreSQL as a repository, `queryFilter` now supports filtering on the contents of arrays. For more information, see [Filter objects in arrays](../objects-guide/queries.html#filter_objects_in_arrays). ### Additional metrics New metrics are available for [workflow](../monitoring-guide/api-metrics.html#api-workflow-metric-names) and [JVM](../monitoring-guide/api-metrics.html#api-jvm-metric-names). ## Security advisories ForgeRock issues security advisories in collaboration with our customers and the open source community to address any security vulnerabilities transparently and rapidly. ForgeRock's security advisory policy governs the process on how security issues are submitted, received, and evaluated as well as the timeline for the issuance of security advisories and patches. For details of all the security advisories across ForgeRock products, see [Security Advisories](https://backstage.forgerock.com/knowledge/kb/book/b21824339) in the *Knowledge Base library*.