Sajith Ekanayaka

Until IS 5.8.0, the default value for `CaseInsensitiveUsername` was `false` (if not specified in user-mgt.xml). But with the new configuration model, it has been set to `true` (in default.json). Enabling...

**Description:** AuthManager ServerURL of the pub nodes is currently pointed to is-km. Therefore when we are creating a tenant, it does not create the default Throttling Policies are not created...

Support for tenant mode

1

**Description:** As discussed in https://github.com/wso2/kubernetes-apim/issues/311, APIM Kubernetes artifacts do not support tenant mode. The following list includes some of the suggested places to be updated in order to support the...

**Description:** Since ForceLocalCache is suggested along with Hazelcast clustering for IS (https://github.com/wso2/product-is/issues/4252), it is required to enable this for IS-KM for APIM deployments too. **Affected Product Version:** 2.6.0

Helm chart for pattern 2 does not allow to run without analytics

2

There are some situations where we need to run the cluster without analytics. But with the current design, every other pod is waiting for analytics to be ready even we...

Helm chart for pattern 2 does not expose IS-KM to outside

3

Helm chart for pattern 2 does not expose IS-KM to outside, therefore it is unable to use the IS only features by accessing the IS-KM nodes. This can be fixed...

**Describe the issue:** It was observed that when there are multiple userstores in the system, user id is searched on all the user stores during the doPostUpdateCredentialByAdminWithID event for non-uniqueID...

Data Purging recomendations

1

**Is your suggestion related to a missing or misleading document? Please describe.** WSO2 IS has a set of in-built operations to clean invalidated/expired data such as session data, access tokens,...

In the IdentityOathEventListener [1], with doPreSetUserClaimValue(s) event, we are clearing AuthorizationGrantCache for all the active access tokens and the authorization codes issued for the user. This cache cleanup is very...

Usernames with leading slashes are allowed but goes into a locked state

2

**Describe the issue:** The default configs in the product is allowing to create users like `/abc/xyz` through SCIM. But thereafter, that user goes into a locked state and unable list...