Page created: 15 Jul 2022 |
Page updated: 25 Jul 2022
To sync passwords with , the server maps the userPassword attribute to the password attribute through a direct attribute mapping.
To sync passwords from the server to :
To create a direct attribute mapping, run the following.
dsconfig create-attribute-mapping \ --map-name PingDirectory_to_PingOne_User_Map \ --mapping-name password \ --type direct \ --set from-attribute:userPassword
The server can synchronize passwords that have been encrypted by server or a hashed version of the password, depending on how an administrator chooses to store passwords on server.
To sync passwords from a generic relational database management system (RDBMS),
create a direct attribute mapping with the from-attribute
being whichever attribute the RDBMS uses to store the password.
RDBMS passwords cannot be encrypted and should be hashed with a scheme that server recognizes.Important:
The server cannot synchronize passwords between systems, because cannot retrieve passwords from .
In the following example, the RDBMS uses the dbPassword attribute to store the password.
dsconfig create-attribute-mapping \ --map-name Generic_RDBMS_to_PingOne_User_Map \ --mapping-name password \ --type direct \ --set from-attribute:dbPassword