关于ForgeRock停止支持OpenAM JEE Policy Agents(3.5)及兼容问题的问询

Great question—let’s break down the reasons behind ForgeRock’s support changes for these agents clearly:

Why Support for OpenAM JEE Policy Agents (3.5) Was Discontinued #

ForgeRock ended support for the 3.5 OpenAM JEE Policy Agents mainly due to product lifecycle evolution and technical obsolescence:

• As ForgeRock moved beyond the legacy OpenAM branding to its updated Access Management (AM) platform, the 3.5 agents were built on older JEE technologies that no longer align with modern security standards and the platform's new architecture.
• Maintaining these outdated agents would pull resources away from developing newer, more secure agent solutions that integrate seamlessly with the latest AM releases.
• The 3.5 agents also lack support for modern authentication protocols, cloud-native environments, and key security enhancements that are central to ForgeRock's current AM roadmap.

Java Agents 5.x+ Compatibility Restrictions #

It’s critical to be aware of the compatibility limits for Java Agents 5.x and later:

• These newer agents are only supported for AM 5.5 and subsequent releases—they do not work with legacy OpenAM deployments.
• This is a deliberate design choice: the 5.x+ Java Agents are built to leverage the updated APIs, security features, and architecture introduced in AM 5.5, which aren’t present in the older OpenAM platform.

内容的提问来源于stack exchange，提问作者Bassem