Share all details related to your problem, including any error messages you may have received.
Question: Oracle now charges a separate license fee for commercial Java usage and this fee is not included in our SailPoint contract. Sailpoint informed us when Oracle started charging a license for JDK, quite a few of their IIQ customers jumped to OpenJDK, which IdentityIQ supports, and does not require a fee.
Has anyone performed this conversion and can speak to what all would be required?
As @ipobeidi said - it’s quite simple - depending on what OS is your IIQ running you need to change JAVA_HOME to point to new JDK and everything should work as it is.
We did some resarch on this topic before our IIQ upgrade to 8.3 from 8.0 and decided to move to Oracle JDK 17 which is available free.
"* Oracle JDK 21 and Oracle JDK 17 and later is available under the [Oracle No-Fee Terms and Conditions License] "(Oracle No-Fee Terms and Conditions (NFTC) License Agreement) which permits free use for all users.
Thanks for the response. I would like some clarification. we are currently using Java version 11.0.6+8-LTS. We are being told by our Sailpoint rep that: “Oracle now charges a separate license fee for commercial Java usage and this fee is not included in your SailPoint contract.”
Then, in 2018, Oracle changed the license of their JDK. Instead of a single JDK build available both for commercial and free users, they offered two different JDK builds:
Oracle JDK (commercial), which can be used in development and testing for free, but you have pay to use it in production
Oracle Open JDK (open source), which can be used in any environment for free
Yes, Sailpoint is correct in stating that they do not control which JDK version you are using. The image below should provide further clarification.
Transitioning to Open JDK or JDK 17 requires almost similar level of effort, so I would suggest testing both versions in your environment to determine which one works best for you
I had it as a snapshot in my project documentation from my initial research during our upgrade project, so don’t have the link handy. but i will try to find it.
On paper, 8.2 does not currently support anything higher than JDK 11, so it is probably best you stick with OpenJDK 11 even though newer versions of Oracle JDK might be free. SailPoint also indicates they did their testing for OpenJDK11 on the Adoptium flavor of OpenJDK. I have used this distro of OpenJDK11 across multiple installs and have had basically no issues. https://adoptium.net/temurin/releases/?os=any&version=11
There are only two things to keep in mind when migrating from my experience:
If you use the default Java cacerts certificate store for any outbound SSL connectivity, make sure you migrate over the necessary certificates to the newly installed OpenJDK instance
TLS 1 and 1.1 connections are disabled by default in OpenJDK 11, so if you have any connections supporting those older algorithms today, you need to allow those connections via Java configuration or adjust those applications to use newer TLS standards
I did find this currently on the oracle site: (Java Downloads | Oracle)
where it does state:
JDK 17 binaries are free to use in production and free to redistribute, at no cost, under the Oracle No-Fee Terms and Conditions (NFTC).
Is the Java JDK 17 found in the above link the same thing as Oracle JDK 17?
