Recent blog articles:
OpenIG 6.2.0 Released
28.10.2026
OpenIG 6.2.0 updates the OpenAM libraries to 16.1.4, so the SAML v2.0 federation handler no longer accepts unsigned assertions, addresses Bouncy Castle, Apache Kafka, lz4-java, jose4j and HttpComponents Core vulnerabilities, closes WebSocket sessions reliably, keeps secrets out of logs and temporary files, and hardens the Docker image
OpenAM 16.1.4 Released
22.10.2026
OpenAM 16.1.4 addresses 18 OpenAM security vulnerabilities including session token disclosure, unsigned SAML v2.0 assertions, administrator account creation through self-registration, built-in accounts with known passwords and open redirects, fixes Windows Desktop SSO and CTS persistent search, and updates vulnerable third-party dependencies
OpenDJ 5.2.0 Released
21.10.2026
OpenDJ 5.2.0 addresses security vulnerabilities in the DSMLv2 gateway, OAuth2 file token authorization, the LDAP listener and the sort and VLV controls, removes lock contention on the bind path, and brings many replication, JDBC backend, Docker, Linux and Windows packaging improvements
Migrating from PingAM 7.5 to OpenAM: A Planning Guide
20.10.2026
A component-by-component look at moving from PingAM 7.5 to OpenAM: what carries over directly, what has to be redesigned and how to estimate the effort.
OpenAM 16.1.3 Released
18.09.2026
OpenAM 16.1.3 addresses 13 OpenAM security vulnerabilities including unauthenticated class instantiation, Liberty ID-FF federation-management access, SSRF and OAuth2/OpenID Connect flaws, adds security hardening and updates vulnerable third-party dependencies
OpenICF 2.0.4 Released
22.07.2026
OpenICF 2.0.4 stabilizes the WebSocket connector server and the batch API, runs the LDAP connector tests against an embedded OpenDJ, modernizes the Docker images and updates OpenDJ to 5.1.2
OpenAM 16.1.2 Released
20.07.2026
OpenAM 16.1.2 with dependency security fixes for js-yaml, ws and websocket-driver, a revocation endpoint in the OpenID Connect discovery document, and an updated embedded OpenDJ 5.1.2
OpenDJ 5.1.2 Released
17.07.2026
OpenDJ 5.1.2 addresses multiple security vulnerabilities including LDAP filter stack exhaustion, JMX deserialization, VLV memory exhaustion and DSMLv2 gateway SSRF, plus ACI, replication and alias dereferencing fixes
OpenAM 16.1.1 Released
17.06.2026
OpenAM 16.1.1 with critical security fixes including pre-authentication RCE, session hijacking, LDAP injection, OAuth bypass vulnerabilities, and new features like MCP server and UI JS SDK
OpenIDM 7.1.0 Released
14.06.2026
OpenIDM 7.1.0 addresses critical security vulnerabilities including CVE-2026-1605, CVE-2026-33227, CVE-2026-39304, CVE-2018-1294, CVE-2026-42198, and adds new features