[SYNCOPE-223] Allow new resources subscription without password using AES or other Symmetric Algorithms

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Duplicate
• Component/s: core
• Assignee: Unassigned
• Reporter: Denis Signoretto
• Due: 16/Oct/12
• Created: 16/Oct/12 09:11
• Updated: 16/Oct/12 13:09
• Resolved: 16/Oct/12 09:20

Description

Related to http://code.google.com/p/syncope/issues/detail?id=264

Scenario: an user is subscribing to a new resource (e.g. has a new role subscribing new resources)

Case 1: 2-way (a.k.a. symmetric) password cipher algorithm is configured in Syncope

Use decrypted password from SyncopeUser to subscribe new resource.

Case 2: 1-way (a.k.a. hash or asymmetric) password cipher algorithm is configured in Syncope and no clear-text password is available (for example, passed via UserMod or provided by a synchronizing resource)

Provide, on a resource-basis, a mean to configure how new password should be generated:

• constant
• random password generation (compliant with resource password policy, if present - see issue 218 )
• provide custom Java class

Issue Links

• duplicates: SYNCOPE-136 Password required for resource subscription