swapy
swapy

Reputation: 290

WSO2 Identity Server: Storing user password as PlainText

I am creating user using UserInformationRecoveryServiceStub, but Identity store saves the user password as Plain Text, but user-mgt.xml has SHA

Upvotes: 0

Views: 379

Answers (1)

Asela
Asela

Reputation: 5821

I think this must be due to configuration issue defined in here. Could you please try to change the configuration as following, i.e with capital P and restart the server. Then try to create a new user and see

<Property name="PasswordHashMethod">SHA</Property>

Upvotes: 1

Related Questions