Actions
Task #706
closed
Call the transform script to resource for PASSWORD attribute
Start date:
09/18/2017
Due date:
% Done:
0%
Estimated time:
Owner:
Description
Situation:
The system supports passwords in the form of MD5 hash. I need to transform the password to MD5 in IdM. So I set the mapping of attribute PASSWORD with the transform script to resource "toMd5". But the transform script is not called in the following scenarios:
The system supports passwords in the form of MD5 hash. I need to transform the password to MD5 in IdM. So I set the mapping of attribute PASSWORD with the transform script to resource "toMd5". But the transform script is not called in the following scenarios:
- creating a new account without supplying the password (= > password will be generated by IdM automatically)
- password change or password reset
The only way how to enforce calling the transform script is to map the attribute to some IdM attribute or EAV attribute. Then it's called (even if the EAV attribute doesn't have any value...). But this works only for password change.
The desired behaviour is to call transform script for all actions where the password is sent to the system.
Affected version 7.3.4.
Related issues
Actions