Project

General

Profile

Task #706

Updated by Alena Peterová over 6 years ago

Situation: 
 The system supports passwords in the form of MD5 hash. I need to transform the password to MD5 in IdM. So I set the mapping of attribute __PASSWORD__ with the transform script to resource "toMd5". But the transform script is not called in the following scenarios: 
 * creating a new account without supplying the password (= > password will be generated by IdM automatically) 
 * password change or password reset 

 The only way how to enforce calling the transform script is to map the attribute to some IdM attribute or EAV attribute. Then it's called (even if the EAV attribute doesn't have any value...). But this works only for password change. 

 The desired behaviour is to call transform script for all actions where the password is sent to the system. 

 Affected version 7.3.4.

Back