Skip to content

Latest commit

 

History

History
18 lines (14 loc) · 2.56 KB

PasswordCredentialHash.md

File metadata and controls

18 lines (14 loc) · 2.56 KB

Okta.Sdk.Model.PasswordCredentialHash

Specifies a hashed password to import into Okta. This allows an existing password to be imported into Okta directly from some other store. Okta supports the BCRYPT, SHA-512, SHA-256, SHA-1, MD5, and PBKDF2 hash functions for password import. A hashed password may be specified in a Password object when creating or updating a user, but not for other operations. See Create User with Imported Hashed Password for information on using this object when creating a user. When updating a user with a hashed password, the user must be in the STAGED status.

Properties

Name Type Description Notes
Algorithm PasswordCredentialHashAlgorithm [optional]
DigestAlgorithm DigestAlgorithm [optional]
IterationCount int The number of iterations used when hashing passwords using PBKDF2. Must be >= 4096. Only required for PBKDF2 algorithm. [optional]
KeySize int Size of the derived key in bytes. Only required for PBKDF2 algorithm. [optional]
Salt string Only required for salted hashes. For BCRYPT, this specifies Radix-64 as the encoded salt used to generate the hash, which must be 22 characters long. For other salted hashes, this specifies the Base64-encoded salt used to generate the hash. [optional]
SaltOrder string Specifies whether salt was pre- or postfixed to the password before hashing. Only required for salted algorithms. [optional]
Value string For SHA-512, SHA-256, SHA-1, MD5, and PBKDF2, this is the actual base64-encoded hash of the password (and salt, if used). This is the Base64-encoded `value` of the SHA-512/SHA-256/SHA-1/MD5/PBKDF2 digest that was computed by either pre-fixing or post-fixing the `salt` to the `password`, depending on the `saltOrder`. If a `salt` was not used in the `source` system, then this should just be the Base64-encoded `value` of the password's SHA-512/SHA-256/SHA-1/MD5/PBKDF2 digest. For BCRYPT, this is the actual Radix-64 encoded hashed password. [optional]
WorkFactor int Governs the strength of the hash and the time required to compute it. Only required for BCRYPT algorithm. [optional]

[Back to Model list] [Back to API list] [Back to README]