Specifies a hashed password to import into Okta. This allows an existing password to be imported into Okta directly from some other store. Okta supports the BCRYPT, SHA-512, SHA-256, SHA-1, MD5, and PBKDF2 hash functions for password import. A hashed password may be specified in a Password object when creating or updating a user, but not for other operations. See Create User with Imported Hashed Password for information on using this object when creating a user. When updating a user with a hashed password, the user must be in the STAGED
status.
Name | Type | Description | Notes |
---|---|---|---|
Algorithm | PasswordCredentialHashAlgorithm | [optional] | |
DigestAlgorithm | DigestAlgorithm | [optional] | |
IterationCount | int | The number of iterations used when hashing passwords using PBKDF2. Must be >= 4096. Only required for PBKDF2 algorithm. | [optional] |
KeySize | int | Size of the derived key in bytes. Only required for PBKDF2 algorithm. | [optional] |
Salt | string | Only required for salted hashes. For BCRYPT, this specifies Radix-64 as the encoded salt used to generate the hash, which must be 22 characters long. For other salted hashes, this specifies the Base64-encoded salt used to generate the hash. | [optional] |
SaltOrder | string | Specifies whether salt was pre- or postfixed to the password before hashing. Only required for salted algorithms. | [optional] |
Value | string | For SHA-512, SHA-256, SHA-1, MD5, and PBKDF2, this is the actual base64-encoded hash of the password (and salt, if used). This is the Base64-encoded `value` of the SHA-512/SHA-256/SHA-1/MD5/PBKDF2 digest that was computed by either pre-fixing or post-fixing the `salt` to the `password`, depending on the `saltOrder`. If a `salt` was not used in the `source` system, then this should just be the Base64-encoded `value` of the password's SHA-512/SHA-256/SHA-1/MD5/PBKDF2 digest. For BCRYPT, this is the actual Radix-64 encoded hashed password. | [optional] |
WorkFactor | int | Governs the strength of the hash and the time required to compute it. Only required for BCRYPT algorithm. | [optional] |