Issues

• Realm DNS Alias Is Rejected by FQDN Validation Unless Added to the Server FQDN Map

  OpenIdentityPlatform/OpenAM#1196 · Filter by author dairoca90 opened on Oct 22, 2026

• OIDC discovery advertises revocation_endpoint at /oauth2/revoke, but token revocation is routed at /oauth2/token/revoke

  bugjavaoauth2
  OpenIdentityPlatform/OpenAM#1195 · Filter by author vharseko opened on Oct 22, 2026

• Client SDK: shaded JAXB runtime is not found through jaxb.properties

  OpenIdentityPlatform/OpenAM#1185 · Filter by author maximthomas opened on Oct 16, 2026

• Docs: publish How-To guides from the wiki

  documentationenhancementwiki
  OpenIdentityPlatform/OpenAM#1156 · Filter by author vharseko opened on Sep 30, 2026

• Docs: add Release Notes

  documentationenhancement
  OpenIdentityPlatform/OpenAM#1153 · Filter by author vharseko opened on Sep 30, 2026

• Click fork: half the upstream imports were never repointed, so type checks in ContainerUtils and Form can never match

  bugjavarefactoring
  OpenIdentityPlatform/OpenAM#1110 · Filter by author vharseko opened on Aug 20, 2026
  1

  

• Account lockout stops counting instead of falling back to memory when the identity store cannot hold the counter

  bugjavasecurity
  OpenIdentityPlatform/OpenAM#1107 · Filter by author vharseko opened on Aug 13, 2026

• Remove Restlet: migrate /oauth2, /uma, /xacml and /.well-known to the ForgeRock CHF stack

  enhancementoauth2
  Feature

  OpenIdentityPlatform/OpenAM#1075 · Filter by author maximthomas opened on Jul 21, 2026