--- title: What’s new description: ForgeRock maintenance releases contain a collection of fixes and minor RFEs grouped together and released as part of our commitment to support our customers. component: pingidm version: 7.4 page_id: pingidm:release-notes:whats-new canonical_url: https://docs.pingidentity.com/pingidm/8.1/release-notes/whats-new.html llms_txt: https://docs.pingidentity.com/pingidm/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md keywords: ["Deployment", "Identities", "Compatibility", "Security"] superseded_by: https://docs.pingidentity.com/pingidm/8.1/release-notes/whats-new.html section_ids: maintenance-releases: Maintenance releases idm_7_4_3: IDM 7.4.3 improved_task_scanner_exception_handling: Improved task scanner exception handling idm_7_4_2: IDM 7.4.2 international_email_addresses: International email addresses secure_rcs_access: Secure RCS access new-array-comparison-742: Array comparison wn-parameter-authorization-74: _api parameter requires authorization jetty-12-support-74: Jetty 12 support java-17-support-74: Java 17 support idm_7_4_1: IDM 7.4.1 idm_7_4_0: IDM 7.4.0 whats-new-filesystem-secrets: Filesystem secret stores whats-new-msgraph-email-client: Microsoft Graph API email client whats-new-metrics: Additional metrics new-script-countonly: Script support for countOnly queries mtls-auth-to-ds: mTLS for authentication to DS security-advisories: Security advisories --- # What's new ## Maintenance releases ForgeRock maintenance releases contain a collection of fixes and minor RFEs grouped together and released as part of our commitment to support our customers. IDM 7.4.3 is the latest release targeted for IDM 7.4 deployments and can be downloaded from the [Backstage Download Center](https://backstage.forgerock.com/downloads/browse/idm/latest). | | | | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | You can deploy the release as an initial deployment or as an update from an existing 7.4.x deployment. Learn more about updating from 7.4.x in [Update to a maintenance release](../upgrade-guide/update-maintenance-release.html). | ## IDM 7.4.3 This release includes updates to OpenICF connectors, updates to dependency libraries, bug fixes, and the following feature: ### Improved task scanner exception handling If the task scanner encounters a task that results in an exception, it now aborts only that task and continues processing the remaining tasks. Previously, the scanner would abort the entire process when any task caused an exception. ## IDM 7.4.2 ### International email addresses IDM now supports [international email addresses](https://en.wikipedia.org/wiki/International_email). This feature is available only for supporting SMTP providers. For more information, refer to [International email addresses](../external-services-guide/email.html#international-email-address). ### Secure RCS access You can create stricter RCS authorization and access rules. To enable authorization for RCS, add an appropriate role to the static-user mapping used for the RCS subject and write the appropriate access rules to permit this role to be granted access to the `openicf` servlet on the path (pattern) corresponding to the RCS name used in the RCS configuration. Learn more in [Secure RCS access](../auth-guide/authorization-and-roles.html#secure-openicf-access). ### Array comparison You can choose how synchronization detects managed object array changes using *unordered* or *ordered* comparison using the configuration property `comparison` in the schema. Unordered JSON array comparison ignores the order of elements and can negate the need for certain custom scripts within mappings. Learn more about [managed object schema properties](../objects-guide/appendix-managed-objects.html#managed-object-property-config-properties) and [array comparison](../synchronization-guide/chap-implicit-live-sync.html#array-comparison). ### `_api` parameter requires authorization Requests passing the `_api` parameter now require authorization. Learn more in [Common REST](../crest/about-crest.html#api-authorize-example). ### Jetty 12 support The embedded Jetty web server supports Jetty 12. ### Java 17 support This IDM release requires Java 17. Learn more in [Embedded Jetty configuration](../install-guide/appendix-jetty.html). ## IDM 7.4.1 * The Flowable embedded workflow engine has been upgraded to version 6.8.0. * End user UI supports array properties. * SalesForce connector supports `client_credentials` and `refresh_token` grant types. ## IDM 7.4.0 ### Filesystem secret stores You can now configure secret stores to use filesystem secret stores. Filesystem secret stores use a directory containing many files, each storing a single secret. For more information, refer to [Filesystem secret stores](../security-guide/secret-stores-filesystem.html). ### Microsoft Graph API email client In addition to the SMTP client, you can now configure the outbound email service to use the new MS Graph API Client. | | | | - | ---------------------------------------------------------------------------------- | | | Use of the new email client requires a properly configured Microsoft Azure tenant. | For more information, refer to [Outbound email](../external-services-guide/email.html). ### Additional metrics New metrics are available for [livesync](../monitoring-guide/api-metrics.html#new-livesync-metric) and [scheduler functions](../monitoring-guide/api-metrics.html#api-scheduler-metric-names). For example requests, refer to [Scheduler metrics](../schedules-guide/schedule-metrics.html). ### Script support for `countOnly` queries Queries within scripts now support the `_countOnly` parameter. ### mTLS for authentication to DS If you're using IDM with a DS repository, ForgeRock recommends using mTLS to authenticate to DS to better facilitate credential rotation. Refer to [Configure mTLS](../install-guide/external-ds.html#external-ds-mtls). ## Security advisories Ping Identity issues security advisories in collaboration with our customers to address any security vulnerabilities transparently and rapidly. Ping Identity's security advisory policy governs the process on how security issues are submitted, received, and evaluated as well as the timeline for the issuance of security advisories and patches. Learn how to find security advisories in the Ping Identity [support portal](https://support.pingidentity.com/s/article/Support-Portal-Guide#SecurityAdvisories) (requires sign-on).