OPENAM-6347 Automatically logout XUI "users" to login page, admins still use session expiry dialog

AME-8895: Disable logging of AM_ACCESS_ATTEMPT by default

OPENAM-6380 Add upgrade step for CTS external connection counts

OPENAM-6673 Adds new end-point to expose version information

Fix for OPENAM-6615, review via HC - add missing class from whitelst of allowed classes to allow Legacy Password reset option page to function

AME-8231 CR-8154 add new view beans to handle global as well as realm based configuration

OPENAM-6741 CR-8123 added LinkedHashSet to deserialization whitelist

Fix for OPENAM-6468 and OPENAM-6499, review CR-7839 - include additional whitelist classes following OPENAM-5925

AME-7754 CR-7755 CR-7713 CR-7719 Implement UMA Label endpoints

AME-7527/AME-7649/AME-7650 CR-7588 Send Email to RO on Pending request creation and Rqp on Pending request approval

OPENAM-3266(CR-7187): Enable users to set heartbeat timeout via advanced setting org.forgerock.openam.ldap.heartbeat.timeout

Fix for OPENAM-5925, review FR-689

AME-5791 CR-6098 UMA Audit external store config

AME-5670 CR-6083 Configurable external resource set store

AME-5055 CR-5040 Allow Referrals to be enabled or disabled from Policy Configuration page and server info endpoint to report status through "referralsEnabled" attribute.

AME-5055, CR-5040: Add a new property to validserverconfig.properties to (potentially) enable or disable access to referrals in the UI.

OPENAM-3604 CR-4627 OIDC Generate registration access tokens

Backport of OPENAM-4253 to 11.0.x

Fix for OPENAM-4253, review FR-301.

OPENAM-3159: Difference in case between results of identity/json/attributes REST API between first and subsequent calls (backport to 11.0.x)

OPENAM-3604: CR-3609: OIDC: Allow open dynamic client registration (without access token)

Fix for OPENAM-3989 - review: CR-3574 ResourceLookup changes: * instead of always using cache, we are now using an advanced property to determine if the lookup results should be cached * using ConcurrentHashMap instead of Hashtable * now only XMLs are looked up from classpath * Cached filenames are no longer verified before returning them to prevent extra lookups

Fix for OPENAM-3989 - review: CR-3574 ResourceLookup changes: * instead of always using cache, we are now using an advanced property to determine if the lookup results should be cached * using ConcurrentHashMap instead of Hashtable * now only XMLs are looked up from classpath * Cached filenames are no longer verified before returning them to prevent extra lookups

Fix for OPENAM-3918 - review: FR-164

OPENAM-3959: auth chain miscalculates auth level (CR-3492)

OPENAM-3959: auth chain miscalculates auth level (CR-3492)

Fix for OPENAM-3918 - review: FR-164

OPENAM-3159: CR-3306: Preserve original case of attribute names

OPENAM-3159: CR-3223: Difference in case between results of identity/json/attributes REST API between first and subsequent calls

AME-2680: CR-3180: Add SVN revision number to build version

CR-2430 OpenAM-3033 added the heartbeat value to the CTS.

OPENAM-3092 CR-2417 org.forgerock.services.cts.store.location property was missing its default which was causing an ISE in the CTS.

OPENAM-3053 CR-2405 After upgrade the CTS Tab no longer throws an unchecked exception.

AME-2160 CR-2161 A story focussed on reducing the Session size when persisted in the CTS.

Integrating AME-2372 branch part III: * Removing obsolete code * Moving lockhart to console * Separating out configurator and upgrade tool from openam-core * Moving LDIF files to their correct location * Removing unnecessary files * Fixing component builds after removing openam-locale * Updates based on review comments

Fix for OPENAM-751, review CR-1239.

Fix for AME-226 - review: CR-981 Fix for upgrade problems: * missing serverdefaults due to Maven migration * changes made to amSession.xml weren't picked up by upgrade system

Fix for OPENAM-1896 Updating the serverdefaults as well to use the correct property name

Fix for AME-202 - review: CR-802