To sync passwords from the server to :

  • To create a direct attribute mapping, run the following. 
    dsconfig create-attribute-mapping \
--map-name PingDirectory_to_PingOne_User_Map \
--mapping-name password \
--type direct \
--set from-attribute:userPassword

    The server can synchronize passwords that have been encrypted by server or a hashed version of the password, depending on how an administrator chooses to store passwords on server.

  • To sync passwords from a generic relational database management system (RDBMS), create a direct attribute mapping with the from-attribute being whichever attribute the RDBMS uses to store the password.

    Note:

    RDBMS passwords cannot be encrypted and should be hashed with a scheme that server recognizes.

    Important:

    The server cannot synchronize passwords between systems, because cannot retrieve passwords from .

    In the following example, the RDBMS uses the dbPassword attribute to store the password.

    dsconfig create-attribute-mapping \
--map-name Generic_RDBMS_to_PingOne_User_Map \
--mapping-name password \
--type direct \
--set from-attribute:dbPassword