OPENAM-8445 Remove maximum session limit

OPENAM-9816 Alternative AMEncryption provider based on AESWrap & PBKDF2

AME-11261 Improved session cache

boot.json AME-12359 checkstyle

AME-12299 integrated session notifications with a new DJ backed notification broker

AME-1246 Remove session purge delay concept

AME-11323 apply feedback from Neil and Peter upgrade keystore location, support multiple hosts for config store

Revert "bootstrap from env vars and boot.properties. Migrate bootstrap file" This reverts commit 316b4b0fffa1e7bde43985d421bc23f00b490bb9.

bootstrap from env vars and boot.properties. Migrate bootstrap file reencrypt keystore files code style updates

AME-11628 Create OIDC SSOProvider

[AME-11243] create suppress upgrade profile

OPENAM-9373 Support more compact and efficent JWE encryption algorithms

OPENAM-8897 made the new JCEKS keystore become the default keystore

OPENAM-9060 Provide a way to override RedirectUrlValidator's fixed default for maximum length URLs

OPENAM-8825

OPENAM-2156, OPENAM-8564 adding org.forgerock.openam.url.connectTimeout and com.sun.identity.policy.resultsCacheResourceCap on Advanced tab of admin console no longer displays Invalid Properties error

OPENAM-8696 OpenAM 13 EmbeddedDJ log spam

OPENAM-8091 Added TLS versions for Data Store

OPENAM-8091 Added TLS versions for Data Store

OPENAM-8461

OPENAM-8463 - Creating New SAMLv2 SOAP Binding Request Handler gives errors

OPENAM-8463 - Creating New SAMLv2 SOAP Binding Request Handler gives errors

OPENAM-6347 Automatically logout XUI "users" to login page, admins still use session expiry dialog

AME-8895: Disable logging of AM_ACCESS_ATTEMPT by default

OPENAM-6380 Add upgrade step for CTS external connection counts

OPENAM-6673 Adds new end-point to expose version information

Fix for OPENAM-6615, review via HC - add missing class from whitelst of allowed classes to allow Legacy Password reset option page to function

AME-8231 CR-8154 add new view beans to handle global as well as realm based configuration

OPENAM-6741 CR-8123 added LinkedHashSet to deserialization whitelist

Fix for OPENAM-6468 and OPENAM-6499, review CR-7839 - include additional whitelist classes following OPENAM-5925

AME-7754 CR-7755 CR-7713 CR-7719 Implement UMA Label endpoints

AME-7527/AME-7649/AME-7650 CR-7588 Send Email to RO on Pending request creation and Rqp on Pending request approval

OPENAM-3266(CR-7187): Enable users to set heartbeat timeout via advanced setting org.forgerock.openam.ldap.heartbeat.timeout

Fix for OPENAM-5925, review FR-689

AME-5791 CR-6098 UMA Audit external store config

AME-5670 CR-6083 Configurable external resource set store

AME-5055 CR-5040 Allow Referrals to be enabled or disabled from Policy Configuration page and server info endpoint to report status through "referralsEnabled" attribute.

AME-5055, CR-5040: Add a new property to validserverconfig.properties to (potentially) enable or disable access to referrals in the UI.

OPENAM-3604 CR-4627 OIDC Generate registration access tokens

Backport of OPENAM-4253 to 11.0.x

Fix for OPENAM-4253, review FR-301.

OPENAM-3159: Difference in case between results of identity/json/attributes REST API between first and subsequent calls (backport to 11.0.x)

OPENAM-3604: CR-3609: OIDC: Allow open dynamic client registration (without access token)

Fix for OPENAM-3989 - review: CR-3574 ResourceLookup changes: * instead of always using cache, we are now using an advanced property to determine if the lookup results should be cached * using ConcurrentHashMap instead of Hashtable * now only XMLs are looked up from classpath * Cached filenames are no longer verified before returning them to prevent extra lookups

Fix for OPENAM-3989 - review: CR-3574 ResourceLookup changes: * instead of always using cache, we are now using an advanced property to determine if the lookup results should be cached * using ConcurrentHashMap instead of Hashtable * now only XMLs are looked up from classpath * Cached filenames are no longer verified before returning them to prevent extra lookups

Fix for OPENAM-3918 - review: FR-164

OPENAM-3959: auth chain miscalculates auth level (CR-3492)

OPENAM-3959: auth chain miscalculates auth level (CR-3492)

Fix for OPENAM-3918 - review: FR-164

OPENAM-3159: CR-3306: Preserve original case of attribute names

OPENAM-3159: CR-3223: Difference in case between results of identity/json/attributes REST API between first and subsequent calls

AME-2680: CR-3180: Add SVN revision number to build version

CR-2430 OpenAM-3033 added the heartbeat value to the CTS.

OPENAM-3092 CR-2417 org.forgerock.services.cts.store.location property was missing its default which was causing an ISE in the CTS.

OPENAM-3053 CR-2405 After upgrade the CTS Tab no longer throws an unchecked exception.

AME-2160 CR-2161 A story focussed on reducing the Session size when persisted in the CTS.

Integrating AME-2372 branch part III: * Removing obsolete code * Moving lockhart to console * Separating out configurator and upgrade tool from openam-core * Moving LDIF files to their correct location * Removing unnecessary files * Fixing component builds after removing openam-locale * Updates based on review comments

Fix for OPENAM-751, review CR-1239.

Fix for AME-226 - review: CR-981 Fix for upgrade problems: * missing serverdefaults due to Maven migration * changes made to amSession.xml weren't picked up by upgrade system

Fix for OPENAM-1896 Updating the serverdefaults as well to use the correct property name

Fix for AME-202 - review: CR-802