Francesco Chicchiriccò created SYNCOPE-136:
----------------------------------------------

             Summary: Password required for resource subscription
                 Key: SYNCOPE-136
                 URL: https://issues.apache.org/jira/browse/SYNCOPE-136
             Project: Syncope
          Issue Type: Improvement
            Reporter: Francesco Chicchiriccò
             Fix For: 1.2.0


Currently, cleartext password is always required when subscribing to a new 
external resource.
However, in some cases (for example when passwords are stored with some 
symmetric algorithm) this can be avoided.

For example, it could be:

Case 1: 2-way (a.k.a. symmetric) password cipher algorithm is configured in 
Syncope

Use decrypted password from SyncopeUser to subscribe new resource.


Case 2: 1-way (a.k.a. hash or asymmetric) password cipher algorithm is 
configured in Syncope and no clear-text password is available (for example, 
passed via UserMod or provided by a synchronizing resource)

Provide, on a resource-basis, a mean to configure how new password should be 
generated:
 * constant
 * random password generation (compliant with resource password policy, if 
present - see SYNCOPE-121)
 * provide custom Java class

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


Reply via email to