Identity and access management
For new deployments, use Syncope 4. See Installing Syncope 4.
Due to schema changes between major versions, you cannot migrate Syncope 2.x to 4.x. You must re-create users, groups, roles, connector instances, and resources. You can also export them using the Syncope 2 REST API and import using the Syncope 4 REST API, or the administration console.
Syncope version support and compatibility
The following Talend products are compatible with Syncope versions:
| Talend Product | Talend Version | Syncope Version | Java Requirement |
|---|---|---|---|
| Talend Runtime | 8.0.1 R2026-06 and later | 4.0, 4.1 | Java 21 |
| TAC (Administration Console) | 8.0.1 R2026-06 and later | 4.0, 4.1 | Java 21 |
| STS (Security Token Service) | 8.0.1 R2026-06 and later | 4.0, 4.1 | Java 21 |
| Talend Runtime | 8.0.1 R2026-05 and earlier | 2.1 (deprecated) | Java 11+ |
Recommended: Use Syncope 4.1 or later with release Talend 8.0 R2026-06 and later.
Known limitations:
- Syncope 4 uses a different REST API than Syncope 2. Custom integrations must be updated.
- Syncope 4 requires Java 21; Syncope 2 required Java 11.
- Syncope 2 is not compatible with TAC/STS from Talend 8.0 R2026-06 onward. Migration is required.
Talend users need to be created and maintained in Syncope to be authenticated and authorized to access your company's ESB resources. However, the use of the JAAS Login module is also possible in the Security Token Service instead of Syncope. For more information on how to use JAAS Login module instead of Syncope as authentication handler in the Security Token Service, consult the ESB container administration guide.
For information about the installation of the Syncope module, see Installing Syncope and configuring the ESB Syncope login module.
Accessing the Syncope module
Apache Syncope is a system that allows you to manage digital identities in enterprise environments. For Talend ESB, it is used to manage users authentication and users and groups authorization.
- Username: admin
- Password: password
Once connected to the application, the default start menu of the Syncope Web UI appears.
Only the use of the Users and Groups functionalities will be described in this chapter. Furthermore, Syncope can be used as is but it can also be used in synchronization with other identity management systems or sources of your company. For an advanced use of Apache Syncope functionalities, see the Syncope documentation.