PingAM release notes

Removed

The functionality listed here was removed.

AM 8.1.0

Command-line tools

The following command-line tools have been removed:

  • ampassword

  • amverifyarchive

  • ssoadm

  • configurator.jar

  • upgrade.jar

amverifyarchive was deprecated in AM 5.5. The other tools were deprecated in AM 5.

Replacements for removed command-line tools
Removed tool Replacement

ampassword

N/A.

This tool was only used for password-based encryption prior to the introduction of secret stores.

amverifyarchive

N/A.

This tool was only used with the deprecated CSV audit event handler.

ssoadm

Use the REST API or Amster to configure AM.

Learn more in the REST API Explorer and the Amster entity reference.

The table below provides equivalent REST endpoints for commonly used ssoadm commands.

configurator.jar

Install AM with minimal user intervention using file-based configuration (FBC), the REST API, or Amster. Learn more in Passive install.

upgrade.jar

Upgrade AM configuration using the amupgrade utility, the upgrade wizard, or over REST. Learn more in Upgrade the server and configuration.
Replacements for commonly used ssoadm commands
ssoadm commands Equivalent REST endpoints

ssoadm clone-server

/json/global-config/servers/server id?_action=clone

ssoadm create-server

/json/global-config/servers?_action=create

ssoadm delete-server

/json/global-config/servers/server id

ssoadm list-servers

/json/global-config/servers?_queryFilter=true

  • ssoadm remove-server-cfg

  • ssoadm update-server-cfg

  • ssoadm list-server-cfg

  • ssoadm import-server

  • ssoadm export-server

/json/global-config/servers/server id/properties/property type

  • ssoadm get-svrcfg-xml

  • ssoadm set-svrcfg-xml

  • ssoadm create-svrcfg-xml

/json/global-config/servers/server id/properties/directoryConfiguration

ssoadm create-site

/json/global-config/sites?_action=create

ssoadm list-sites

/json/global-config/sites?_queryFilter=true

  • ssoadm add-site-sec-urls

  • ssoadm remove-site-sec-urls

  • ssoadm set-site-pri-url

  • ssoadm set-site-sec-urls

  • ssoadm show-site

  • ssoadm delete-site

/json/global-config/sites/site id

  • ssoadm add-site-members

  • ssoadm remove-site-members

  • ssoadm show-site-members

/json/global-config/servers/server id/properties/general

ssoadm create-realm

/json/global-config/realms?_action=create

Find more information in Manage realms.

  • ssoadm delete-realm

  • ssoadm set-realm-attrs

  • ssoadm delete-realm-attr

  • ssoadm get-realm

/json/global-config/realms/realm id

Find more information in Manage realms.

ssoadm list-realms

/json/global-config/realms?_queryFilter=true

Find more information in Manage realms.

  • ssoadm create-datastore

  • ssoadm delete-datastores

  • ssoadm list-datastores

  • ssoadm show-datastore

  • ssoadm update-datastore

/json/realms/root/realms/realm name/realm-config/services/id-repositories/datastore type

  • ssoadm list-datastore-types

  • ssoadm show-data-types

/json/realms/root/realms/realm name/realm-config/services/id-repositories?_action=getCreatableTypes

  • ssoadm policy-export

  • ssoadm policy-import

The ssoadm commands exported and imported the policies, resource types, and policy sets together. Use the following endpoints to manage these individually:

  • /json/realms/root/realms/realm name/policies

  • /json/realms/root/realms/realm name/resourcetypes

  • /json/realms/root/realms/realm name/applications

Find more information in Policies over REST, Resource types over REST, and Policy sets over REST.

  • ssoadm create-xacml

  • ssoadm list-xacml

/xacml/realm name/policies

Find more information in Import and export policies.

  • ssoadm create-appl

  • ssoadm delete-appls

  • ssoadm list-appls

  • ssoadm set-appl

  • ssoadm show-appl

  • ssoadm delete-xacml

/json/realms/root/realms/realm name/applications

Find more information in Policy sets over REST.

  • ssoadm add-agent-to-grp

  • ssoadm agent-remove-props

  • ssoadm create-agent

  • ssoadm delete-agents

  • ssoadm list-agents

  • ssoadm remove-agent-from-grp

  • ssoadm show-agent

  • ssoadm show-agent-membership

  • ssoadm update-agent

/json/realms/root/realms/realm name/realm-config/agents/agent type

  • ssoadm create-agent-grp

  • ssoadm delete-agent-grps

  • ssoadm list-agent-grp-members

  • ssoadm list-agent-grps

  • ssoadm show-agent-grp

  • ssoadm update-agent-grp

/json/realms/root/realms/realm name/realm-config/agents/groups/agent type

ssoadm show-agent-types

/json/realms/root/realms/realm name/realm-config/agents?_action=getCreatableTypes

  • ssoadm create-identity

  • ssoadm delete-identities

  • ssoadm get-identity

  • ssoadm list-identities

  • ssoadm show-identity-ops

  • ssoadm show-identity-types

  • /json/realms/root/realms/realm name/users

  • /json/realms/root/realms/realm name/groups

Find more information in Manage identities.

ssoadm set-identity-attrs

/json/realms/root/realms/realm name/users/user id

Find more information in Manage identities.

ssoadm add-privileges

  • /json/realms/root/realms/realm name/users

  • /json/realms/root/realms/realm name/groups

Find more information in Delegate privileges over REST.

  • ssoadm show-members

  • ssoadm show-privileges

/json/realms/root/realms/realm name/groups/group name

ssoadm show-memberships

/json/realms/root/realms/realm name/users/user id/groups

  • ssoadm add-svc-identity

  • ssoadm get-identity-svcs

  • ssoadm remove-svc-identity

/json/realms/root/realms/realm name/users/user id/services

  • ssoadm set-identity-svc-attrs

  • ssoadm show-identity-svc-attrs

/json/realms/root/realms/realm name/users/user id/services/service name

ssoadm list-identity-assignable-svcs

/json/realms/root/realms/realm name/users/user id/services?_action=getAllTypes

  • ssoadm add-cot-member

  • ssoadm create-cot

  • ssoadm list-cot-members

  • ssoadm remove-cot-member

/json/realms/root/realms/realm name/realm-config/federation/circlesoftrust/cot name

ssoadm delete-cot

/json/realms/root/realms/realm name/realm-config/federation/circlesoftrust/cot name

ssoadm delete-entity

/json/realms/root/realms/realm name/realm-config/saml2/hosted/encoded entity name

ssoadm export-entity

/json/realms/root/realms/realm name/realm-config/saml2/hosted/encoded entity name

Alternatively, use the /ExportSamlMetadata URL as described in Export metadata.

ssoadm import-entity

/json/realms/root/realms/realm name/realm-config/saml2/hosted?_action=create

ssoadm list-cots

/json/realms/root/realms/realm name/realm-config/federation/circlesoftrust?_queryFilter=true

ssoadm list-entities

/json/realms/root/realms/realm name/realm-config/saml2?_queryFilter=true

ssoadm update-entity-keyinfo

/json/realms/root/realms/realm name/realm-config/saml2/remote?_action=importEntity

Find more information in Update remote SP certificate.

  • ssoadm do-bulk-federation

  • ssoadm import-bulk-fed-data

Use the individual REST endpoints to manage federation entities.

ssoadm create-metadata-templ

Use the individual REST endpoints to create entity providers.
SAML v2.0 JSPs

The following deprecated JSPs have been removed and replaced by URL entry points:

JSPs replaced by URLs
Old URL New URL

/saml2/jsp/exportmetadata.jsp

/ExportSamlMetadata

/saml2/jsp/idpSingleLogoutInit.jsp

/IDPSloInit

/saml2/jsp/idpSingleLogoutRedirect.jsp

/IDPSloRedirect

/saml2/jsp/idpSingleLogoutPOST.jsp

/IDPSloPOST

/saml2/jsp/idpMNIRedirect.jsp

/IDPMniRedirect

/saml2/jsp/idpMNIRequestInit.jsp

/IDPMniInit

/saml2/jsp/idpSSOFederate.jsp

/idpSSOFederate

/saml2/jsp/spAssertionConsumer.jsp

/Consumer

/saml2/jsp/saml2AuthAssertionConsumer.jsp

/AuthConsumer

/saml2/jsp/spSingleLogoutInit.jsp

/SPSloInit

/saml2/jsp/spSingleLogoutRedirect.jsp

/SPSloRedirect

/saml2/jsp/spSingleLogoutPOST.jsp

/SPSloPOST

/saml2/jsp/spMNIRedirect.jsp

/SPMniRedirect

/saml2/jsp/spMNIPOST.jsp

/SPMniPOST

/saml2/jsp/spMNIRequestInit.jsp

/SPMniInit

/saml2/jsp/spSSOInit.jsp

/spssoinit

/saml2/jsp/idpSSOInit.jsp

/idpssoinit

/saml2/jsp/idpSSOFederate.jsp

/idpSSOFederate

/saml2/jsp/SA_IDP.jsp

/idpsaehandler

/saml2/jsp/SA_SP.jsp

/spsaehandler
You can still invoke the JSPs because they’re mapped to URLs for backward compatibility, but any customizations to these JSPs will be lost.

AM 8.0

Authentication modules and chains

We’ve removed authentication modules and chains. They were deprecated in AM 7.

For this release only, it’s possible to temporarily re-enable modules and chains for migration purposes. Learn more in Authentication modules and chains.

Embedded DS

The embedded DS server has been removed.

It was deprecated in AM 7 for use in production.

Legacy audit logging service

The legacy audit logging service was deprecated in AM 7.2 and is no longer supported.

SOAP STS service

The SOAP STS service has been removed.

It was deprecated in AM 7.

AM 7.5

Java 11

AM 7.5 removes support for Java 11. Only Java 17 is supported in this release.

SNMP monitoring

SNMP monitoring was deprecated in AM 7.3 and is no longer supported.

AM 7.4

No features or functionality were removed in this release.