IIQ Conversion to OpenJDK

https://community.sailpoint.com/t5/IdentityIQ-Articles/IdentityIQ-Supported-Platforms-Matrix/ta-p/75551

On paper, 8.2 does not currently support anything higher than JDK 11, so it is probably best you stick with OpenJDK 11 even though newer versions of Oracle JDK might be free. SailPoint also indicates they did their testing for OpenJDK11 on the Adoptium flavor of OpenJDK. I have used this distro of OpenJDK11 across multiple installs and have had basically no issues. https://adoptium.net/temurin/releases/?os=any&version=11

There are only two things to keep in mind when migrating from my experience:

  • If you use the default Java cacerts certificate store for any outbound SSL connectivity, make sure you migrate over the necessary certificates to the newly installed OpenJDK instance
  • TLS 1 and 1.1 connections are disabled by default in OpenJDK 11, so if you have any connections supporting those older algorithms today, you need to allow those connections via Java configuration or adjust those applications to use newer TLS standards
2 Likes