--- title: Before you install description: This section covers requirements before you run ForgeRock Identity Management software, especially in a production environment. If you have a special request to support a component or combination not listed here, contact ForgeRock at info@forgerock.com. component: pingidm version: 7.3 page_id: pingidm:release-notes:before-you-install canonical_url: https://docs.pingidentity.com/pingidm/8.1/release-notes/before-you-install.html llms_txt: https://docs.pingidentity.com/pingidm/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md superseded_by: https://docs.pingidentity.com/pingidm/8.1/release-notes/before-you-install.html section_ids: prerequisites-hardware: Hardware and memory requirements prerequisites-os: Operating System requirements prerequisites-java: Java requirements prerequisites-container: Supported web application containers prerequisites-repositories: Supported repositories prerequisites-clients: Supported browsers prerequisites-connectors: Supported connectors prerequisites-plugins: Supported password synchronization plugins --- # Before you install This section covers requirements before you run ForgeRock Identity Management software, especially in a production environment. If you have a special request to support a component or combination not listed here, contact ForgeRock at . ## Hardware and memory requirements Due to the underlying Java platform, IDM software runs well on a variety of processor architectures. When you install IDM for evaluation with the embedded DS repository, you need: * 256 MB memory (32-bit) or 1 GB memory (64-bit) available. * 10 GB free disk space for the software and sample data. | | | | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | A DS repository (whether embedded or external) requires free disk space of 5% of the filesystem size, plus 1 GB by default. To change this requirement, set the `disk-full-threshold` in the DS configuration. For more information, refer to [Disk Space Thresholds](https://docs.pingidentity.com/pingds/7.3/config-guide/import-export.html#set-database-backend-disk-thresholds) in the *DS Maintenance Guide*.In the case of an embedded DS instance, you can manage the configuration using the `dsconfig` command in `/path/to/openidm/db/openidm/opendj/bin`. | In production, disk space and memory requirements depend on the size of your external repository, as well as the size of the audit and service log files that IDM creates. The amount of memory that IDM consumes is highly dependent on the data that it holds. Queries that return large data sets will have a significant impact on heap requirements, particularly if they are run in parallel with other large data requests. To avoid out-of-memory errors, analyze your data requirements, set the heap configuration appropriately, and modify access controls to restrict requests on large data sets. IDM exposes many JVM metrics to help you analyze the amount of memory that it is consuming. For more information on analyzing hardware and memory performance, see [Load testing](../monitoring-guide/load-testing.html). ## Operating System requirements IDM 7.3 software is supported on the following operating systems: * Red Hat Enterprise Linux (and Rocky Linux) 7.9, 8.7, and 9.1 * Ubuntu Linux 20.04 and 22.04 * Windows Server 2019 and 2022 ## Java requirements IDM software supports the following Java environments: **Supported Java Versions** | Vendor | Versions | | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------- | | OpenJDK, including OpenJDK-based distributions:- AdoptOpenJDK/Eclipse Temurin - Amazon Corretto - Azul Zulu - Red Hat OpenJDK ForgeRock tests most extensively with AdoptOpenJDK/Eclipse Temurin. ForgeRock recommends using the HotSpot JVM. | 17\* | | Oracle Java | 17\* | \* Version 17.0.9 or higher. | | | | - | ---------------------------------------------------------------------------------------------------- | | | ForgeRock recommends that you keep your Java installation up to date with the latest security fixes. | ## Supported web application containers You must install IDM as a standalone service, using the bundled Apache Felix framework and Jetty web application container. Alternate containers are not supported. IDM bundles Jetty version 12.0.25. ## Supported repositories The following repositories are supported for use in production: * ForgeRock Directory Services (DS) 7.2, 7.3, and 7.4. By default, IDM uses an *embedded* DS instance for testing purposes. The embedded instance is not supported in production. If you want to use DS as a repository in production, you must set up an external instance. * MySQL version 5.7 and 8.0 with MySQL JDBC Driver Connector/J 8.0. | | | | - | ------------------------------------------------------------------------------------------------------- | | | Do not use Connector/J versions 8.0.23 through 8.0.25. [Why?](https://bugs.mysql.com/bug.php?id=102372) | * MariaDB version 10.6.11 and 10.10.2 with MySQL JDBC Driver Connector/J 8.0. | | | | - | ------------------------------------------------------------------------------------------------------- | | | Do not use Connector/J versions 8.0.23 through 8.0.25. [Why?](https://bugs.mysql.com/bug.php?id=102372) | * Microsoft SQL Server 2019 and 2022. * Oracle Database 19c and 21c. * PostgreSQL 13.10, 14.7, and 15.2. * IBM DB2 11.5. ForgeRock supports repositories in cloud-hosted environments, such as AWS and GKE Cloud, as long as the underlying repository is supported. In other words, the repositories listed above are supported, regardless of how they are hosted. | | | | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | These repositories might not be supported on all operating system platforms. refer to the specific repository documentation for more information.Do not mix and match versions. For example, if you are running Oracle Database 19c, and want to take advantage of the support for Oracle UCP, download driver and companion JARs for Oracle version 19c. | ## Supported browsers The IDM UI has been tested with the latest, stable versions of the following browsers: * Chrome and Chromium * Edge * Firefox * Safari ## Supported connectors IDM bundles the following connectors: * Adobe Cloud Marketing connector * CSV File connector * Database Table connector * Google Apps connector * Groovy Connector Toolkit This toolkit lets you create scripted connectors to virtually any resource. * Kerberos connector The Kerberos connector bundled with IDM 7.3.3 is *not* backward-compatible with IDM 6.x. IDM 7.3.3 uses Groovy version 3.0. IDM 6.5 uses version 2.5, and IDM 6 uses version 2.4. The bundled Kerberos connector requires Groovy version 3.0. * LDAP connector Using the LDAP connector to provision to Active Directory is supported with Active Directory Domain Controllers, Active Directory Global Catalogues, and Active Directory Lightweight Directory Services (LDS). * Marketo connector * MongoDB connector * Microsoft Graph API connector * Salesforce connector * SCIM connector * Scripted REST connector The scripted REST connector bundled with IDM 7.3.3 is *not* backward-compatible with IDM 6.x. IDM 7.3.3 uses Groovy version 3.0. IDM 6.5 uses version 2.5, and IDM 6 uses version 2.4. The bundled scripted REST connector requires Groovy version 3.0. * Scripted SQL connector The scripted SQL connector bundled with IDM 7.3.3 is *not* backward-compatible with IDM 6.x. IDM 7.3.3 uses Groovy version 3.0. IDM 6.5 uses version 2.5, and IDM 6 uses version 2.4. The bundled scripted SQL connector requires Groovy version 3.0. * ServiceNow connector * Scripted SSH connector The scripted SSH connector bundled with IDM 7.3.3 is *not* backward-compatible with IDM 6.x. IDM 7.3.3 uses Groovy version 3.0. IDM 6.5 uses version 2.5, and IDM 6 uses version 2.4. The bundled scripted SSH connector requires Groovy version 3.0. Additional connectors are available from the [Backstage download site](https://backstage.forgerock.com/downloads). A PowerShell Connector Toolkit is bundled with the .NET remote connector server. This toolkit lets you create scripted connectors to address the requirements of your Microsoft Windows ecosystem. Windows Server 2012 R2, 2016, and 2019 are supported as the remote systems for connectors and password synchronization plugins. | | | | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | In IDM 7.3.2 and later, the embedded Jetty web server supports Jetty 12. Future releases of IDM 7.3.x are only compatible with Java 17. Jetty 12 requires this change.When serving SSL requests, Jetty 12 checks that the incoming host header matches the server certificate's subject and returns a `400 Bad Request` error on a mismatch. If you're upgrading to IDM 7.3.2 or later, you must ensure your IDM server certificate subject matches the host name used by your deployment.Learn more in [What's new](whats-new.html#jetty-12-support-73). | Refer to [Install Java RCS](https://docs.pingidentity.com/openicf/connector-reference/java-server.html) for supported Java versions. The .NET RCS requires the .NET framework (version 4.6.2 or later) and is supported on Windows Server versions 2012 R2, 2016, and 2019. | | | | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | | Although the scripted connector toolkits are supported, connectors that you build with these toolkits are not supported. You can find examples of how to build connectors with these toolkits in [Samples](../samples-guide/preface.html). | The following table lists the connector and RCS versions that are supported across IDM versions. For a list of connectors supported with this IDM release, refer to the [OpenICF connector documentation](https://docs.pingidentity.com/openicf/index.html). For a list of connector releases associated with this version of IDM, refer to the [OpenICF release notes](https://docs.pingidentity.com/openicf/connector-release-notes/overview.html). **IDM / OpenICF Compatibility Matrix** | IDM Version | RCS Version | Java Connectors | Scripted Groovy Connectors | .NET Connectors | | ----------- | ----------- | ----------------------------- | -------------------------------------------------------------------- | -------------------------- | | 7.x | 1.5.x | Java connectors version 1.5.x | Scripted REST, Scripted SQL, SSH, Kerberos connectors version 1.5.x. | PowerShell Connector 1.5.x | ## Supported password synchronization plugins The following table lists the supported password synchronization plugins: | Plugin | Supported Version | | ------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | DS Password Synchronization Plugin | 7.3.x, supported with DS 7.3.x and IDM 7.3.x7.1.x, supported with DS 7.1.x, DS 7.2.x, IDM 7.1.x, and IDM 7.2.x7.0.1, supported with DS 7.0.x, IDM 7.0.x, and IDM 7.1.x6.5.0, supported with DS 6.5.x and IDM 6.5.x6.0, supported with DS 6.0.x and IDM 6.0.x5.5.0, supported with DS 5.5.x and IDM 5.5.x5.0, supported with DS 5.0.x and IDM 5.0.x3.5, supported with OpenDJ 3.5 and OpenIDM 4.xDS Password Sync plugins are not supported with DS OEM | | Active Directory Password Synchronization Plugin | 1.7.0 and 1.5.0 supported on Windows Server versions 2012 R2, 2016, 2019, and 2022 |