-
Title
Enhancement Request: Configurable Password Hashing for OpenLDAP Synchronization -
Description
Request
Add a native option in Active Roles Synchronization Service to select the password hashing algorithm used when synchronizing passwords to OpenLDAP.
Business Need
Organizations synchronizing Active Directory accounts and passwords to OpenLDAP may require a specific password storage format based on their existing OpenLDAP configuration, application compatibility, or internal standards.
Currently, Active Roles Synchronization Service does not provide a built-in setting to select the hashing algorithm. The resulting password format is controlled by the OpenLDAP environment. Although a PowerShell password-transformation script may be used, this requires custom development and ongoing maintenance.
Requested Functionality
Provide a configurable setting within an OpenLDAP password synchronization rule that allows administrators to:
- Select a supported password hashing algorithm.
- Apply the selected format when writing passwords to the OpenLDAP
userPasswordattribute. - Validate whether the selected algorithm is supported by the target OpenLDAP environment.
- Avoid the need for custom PowerShell transformation scripts.
-
Cause
An enhancement request (731950) has been created detailing the feature above.
-
Resolution
STATUS
The product team will evaluate the request and this feature may become available on a future release of the product.
Please refer to this article for updates or contact support referencing the Enhancement Request ID: 731950.
-
Change Request
731950 -
Additional Information
There are no guarantees that this specific enhancement request will be implemented in a future release. For more information regarding our Enhancement Request policy, refer to our Global Support Guide on the Support Portal at: Guide to One Identity Support.