Home
What's new in HCL Domino® 11.0?
Learn about all of the new features for administrators in HCL Domino® 11.0.
Limiting ID file downloads from the ID vault is disabled for SAML federated login
When SAML Notes® federated login or SAML Web federated login is the authentication method used to extract HCL Notes ID files from the ID vault, the value for the ID Vault policy setting Allow automatic ID downloads is now ignored. (This setting is in the ID vault tab of a Security Settings policy document).

What's new in HCL Domino® 11.0?
Learn about all of the new features for administrators in HCL Domino® 11.0.
- New Domino® licensing model
  Active license management is not available for production use licenses at this time. Therefore, configuring a FlexNet license server for Domino 11.0.0 is not required.
- Product rebranding
  References to IBM® have been rebranded to HCL for the Notes® and Domino® product family.
- New InstallAnywhere platform for Domino®
  Flexera InstallAnywhere 2018 is the underlying install platform used as of HCL Domino® 11.
- Directory Sync
  Directory Sync allows you to sync people and group data from an external LDAP directory into the Domino® directory. Currently data from Active Directory can be synced.
- DAOS tier2 storage
  Domino® Attachment Object Service (DAOS) tier 2 storage enables you to use an S3-compatible storage service to store older attachment objects that haven't been accessed within a specified number of days. This feature allows you to reduce the amount of data stored on Domino servers that use DAOS. It can also improve the performance of any incremental file backups done for DAOS.
- New Java™ Runtime Environment
  The Java™ Runtime Environment (JRE) that comes with HCL Domino® 11 and HCL Domino Designer 11 is now Eclipse OpenJ9 that is provided through AdoptOpenJDK.
- IBM® GSKit cryptographic libraries replaced with the OpenSSL equivalents
  On all HCL Notes® and Domino® platforms, OpenSSL 1.1.1a cryptographic libraries replace the IBM® GSKit libraries provided in earlier releases.
- Limiting ID file downloads from the ID vault is disabled for SAML federated login
  When SAML Notes® federated login or SAML Web federated login is the authentication method used to extract HCL Notes ID files from the ID vault, the value for the ID Vault policy setting Allow automatic ID downloads is now ignored. (This setting is in the ID vault tab of a Security Settings policy document).
- Authenticating web users against the Notes ID passwords in the ID vault
  You can configure HCL Domino® to use the password in an ID vault to authenticate web users that access the server.
- Components no longer included in Domino® 11
  The following components are no longer included in HCL Domino® 11.
- Documentation updates article on the Support site
  See the article Domino 11 documentation updates for any significant corrections or other updates to this documentation.

Limiting ID file downloads from the ID vault is disabled for SAML federated login

When SAML Notes® federated login or SAML Web federated login is the authentication method used to extract HCL Notes® ID files from the ID vault, the value for the ID Vault policy setting Allow automatic ID downloads is now ignored. (This setting is in the ID vault tab of a Security Settings policy document).

The setting is ignored because SAML authentication requires unrestricted download access to ID files from the vault.

Note: If the Allow password authentication with the ID vault setting is enabled for federated login, Allow automatic ID downloads setting is still used for the password authentication. Allow password authentication with the ID vault setting is found in the Federated Login > Additional settings for Federated Login (Notes or Web) section of the Security Settings policy document.