Recent Insights from Our Community Blog
Stay ahead with tutorials, releases, and best practices on open-source IAM. Dive into real-world implementations.
OpenAM 16.1.4 Released
OpenAM 16.1.4 addresses 18 OpenAM security vulnerabilities including session token disclosure, unsigned SAML v2.0 assertions, administrator account creation through self-registration, built-in accounts with known passwords and open redirects, fixes Windows Desktop SSO and CTS persistent search, and updates vulnerable third-party dependencies
OpenDJ 5.2.0 Released
OpenDJ 5.2.0 addresses security vulnerabilities in the DSMLv2 gateway, OAuth2 file token authorization, the LDAP listener and the sort and VLV controls, removes lock contention on the bind path, and brings many replication, JDBC backend, Docker, Linux and Windows packaging improvements
OpenAM 16.1.3 Released
OpenAM 16.1.3 addresses 13 OpenAM security vulnerabilities including unauthenticated class instantiation, Liberty ID-FF federation-management access, SSRF and OAuth2/OpenID Connect flaws, adds security hardening and updates vulnerable third-party dependencies
Open Source Licensing
All source code and binaries are freely available under the Common Development and Distribution License (CDDL). Contribute, fork, and deploy without restrictions.
Coming from ForgeRock?
ForgeRock has closed its open-source releases, but the open-source line lives on. Open Identity Platform continues OpenAM, OpenDJ, OpenIDM, OpenIG, and OpenICF under the CDDL license — no license fees, no lock-in. See the ForgeRock alternative & migration path to map your stack.
Join the Open Identity Platform Community
Connect with developers, share ideas, and collaborate on the future of IAM. Whether you're troubleshooting, contributing code, or seeking support - we're here.
Join discussions on GitHub Discussions.
Commercial support
Need SLAs, consulting, implementation, or migration help? See Support & Services for free community help and a directory of approved independent vendors. The canonical list lives in the Approved Vendor List wiki.