This documentation is for WSO2 Identity Server 5.3.0 . View documentation for the latest release.

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


Operating Systems/Databases/User Stores

  • All WSO2 Carbon-based products are Java applications that can be run on any platform that is Oracle JDK 7/8 or OpenJDK 8 compliant.
Also, we  do not recommend OpenJDK as we do not support it or test our products with it.
  • All WSO2 Carbon-based products are generally compatible with most common DBMSs. The embedded H2 database is suitable for development and testing. For enterprise production environments we recommend an industry-standard RDBMS such as Oracle, PostgreSQL, MySQL, MS SQL, etc. For more information, see Working with Databases.
  • WSO2 Identity Server supports using any of the following as a user store:
  • WSO2 Identity Server is shipped with a default embedded Apache DS that is suitable for development purposes. WSO2 does not recommend using Apache DS in a production environment due to scalability issues that exist with Apache DS.
  • WSO2 does not recommend using the H2 database as a user store in production environments. However, you can use the H2 database for development purposes if necessary.

Required applications

The following applications are required for running the product and its samples or for building from the source code. 





Download Links

Java SE Development Kit (JDK)*

  • Oracle JDK 7 or 8


Some updates of JDK 1.8 (for example, JDK1.8.0_151) are affected by a known issue related to GZIP decoding. Until this issue is fixed, we recommend one of the following approaches:

  • Use either JDK1.8.0_144 or JDK1.8.0_077 updates. We have verified that these versions are not affected by the known issue.
  • Alternatively, you can disable GZIP decoding for your product by following the steps given below. This will ensure that your product is not affected by the known issue.
    1. Open the catalina-server.xml file from the <IS_HOME>/repository/conf/tomcat/ directory.
    2. Set the compression parameter (under each of the connector configurations) to false as shown below:

      Code Block
    3. Restart the server.

If you are using an Oracle JDK version lower than 8u161, you need to download the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy files from here and add the files to the security directory of your Java installation to avoid illegal key size errors when you try to invoke a secured Web service.

  • Oracle and IBM JRE 1.7 are also supported when running (not building) WSO2 products.We do not recommend OpenJDK.

Java downloads

Web Browser*

To access the product's Management Console. The Web Browser must be JavaScript enabled to take full advantage of the Management console.


On Windows Server 2003, you must not go below the medium security level in Internet Explorer 6.x.