OPENAM-2725 Disable FQDN checking by default

AME-12266 Treat web agents as OAuth2 clients

AME-12067 - Modify the agent schema to add description for each agent type

AME-11994 - Hide OAuth2Client from the agent service get creatable type list

AME-11836 Add order property to the schemas

OPENAM-9267 New default values for idtokeninfo endpoint

OPENAM-9127 Default value of the "ID Token Signing Algorithm" for OAuth 2.0/OpenID Connect Client is HS256

OPENAM-5093 Allow resource owner consent to be skipped

AME-9974 Allow encryption of openid connect tokens

OPENAM-8596

OPENAM-8596

OPENAM-8363 Static JWK support

OPENAM-8423: Users can now set custom audience for SAML assertion validation

OPENAM-8423: Users can now set custom audience for SAML assertion validation

AME-8505 Removal of legacy sts code

AME-7890 CR-8230 Passing of claim values to the consent page

AME-7899 CR-8099 Add config to allow refresh tokens to never expire

AME-6707 CR-8059 Correct token lifetime labels on Oauth2 client page

OPENAM-6236 CR-7531 Add token life time options per OAuth2 client.

OPENAM-5583 CR-7140 Make it possible to register a client with localized names.

OPENAM-5924 - Review by PM by hand - Defaults default max age to false for oauth2/oidc clients

OIDC Conformance merge. OPENAM-5699, OPENAM-5700, OPENAM-5746, OPENAM-5777, OPENAM-5474, OPENAM-5779. CR-6692, CR-6691, CR-6656, CR-6645.

OPENAM-5596, OPENAM-5593, CR-6284 - update post_logout_redirect_uris to be a set

soap-sts agent tab: AME-5704, CR-6090

OPENAM-718 CR-5810 Migrate agent group membership information Originally the agent group membership was stored in a field called "labeledUri", however this field is not serialized when running export-svc-cfg ssoadm command. Rather than modifying the XML schema for the service definitions, the agent group membership information has been moved to a new AttributeSchema element called "agentgroup" for each agent type. A new upgrade step has been implemented to ensure that the group membership information is migrated across to the new attribute during upgrade.

OPENAM-718 CR-5810 Migrate agent group membership information Originally the agent group membership was stored in a field called "labeledUri", however this field is not serialized when running export-svc-cfg ssoadm command. Rather than modifying the XML schema for the service definitions, the agent group membership information has been moved to a new AttributeSchema element called "agentgroup" for each agent type. A new upgrade step has been implemented to ensure that the group membership information is migrated across to the new attribute during upgrade.

OPENAM-718 CR-5810 Migrate agent group membership information Originally the agent group membership was stored in a field called "labeledUri", however this field is not serialized when running export-svc-cfg ssoadm command. Rather than modifying the XML schema for the service definitions, the agent group membership information has been moved to a new AttributeSchema element called "agentgroup" for each agent type. A new upgrade step has been implemented to ensure that the group membership information is migrated across to the new attribute during upgrade.

OPENAM-5267 Default algorithm changed to RS256 from HS256 (reviewed by IM)

OPENAM-5267 Default algorithm changed to RS256 from HS256 (reviewed by IM)

AME-5052 Agent configs for web app and J2EE can now take a realm and application value

OPENAM-4495 CR-4850 Allow to map ducplicate keys in agent profiles

OPENAM-4394 CR-4869 Support OAuth2 JWT Bearer extension

AME-4639 CR-4796 CR-4779, AME-4638 CR-4780 Mobile OIDC support

OpenAm-3605 Completed

Fix for OPENAM-336 - review: CR-3380 Adding new actions for the default entitlement application: PUT, DELETE, HEAD, OPTIONS, PATCH

Fix for OPENAM-336 - review: CR-3380 Adding new actions for the default entitlement application: PUT, DELETE, HEAD, OPTIONS, PATCH

OPENAM-3674 CR-3078 Added a default value missed in the prvious commit.

OPENAM-3674 CR-3078 Fix OpenID Connect client registration endpoint. Added default for parameters, and parameters required for interop tests.

Fix for OPENAM-3154 - review: CR-2791 Introducing a new setting for declarative security role mapping. Now it is possible to only map the actual names of the groups and roles instead of their universal IDs'.

CR-2278 OPENAM-2352 Make the registerClient.jsp use the OAuth2 client rest endpoint.

CR-2171 AME-397 OpenID Session Management

Integrating AME-1809 / AME-2156 branch This merge also includes changes for: * short reports were always generated when clicking on an actionlink, even though the report isn't actually displayed. * Implementation of OPENAM-1630 SAML2 metadata signatures are now compliant with the specification. Within this change two new realm level option has been introduced: metadataSigningKey metadataSigningKeyPass These will tell OpenAM which private key to use for signing the SAML2 metadata. In case the SAML entity is remote, OpenAM will try to maintain the original XML signature (if present), otherwise it will be signed with the configured key. * Fixing minor bug with configurator in case the system is already upgraded. The problem was that the request for upgrade.htm resulted in a redirect which has been automatically followed, so the final response code was 200, and that confused the configurator. * Fix for OPENAM-2710 * Fix for OPENAM-2064 Dashboard service has been extracted to a separate LDIF file and the schema is now available for all supported data store types.

Fix for OPENAM-773/CR-2015 in OpenAM trunk

AME-1713 merge openid connect progress

Fix for OPENAM-2032 - review: CR-1506 Modifying the OAuth2Client service so it now can be exported correctly through ssoadm/console.

AME-186 CR-788 moving OAuth 2.0 provider into trunk

Fix for AME-202 - review: CR-802