-
Title
Password Synchronization encryption behaviour -
Description
This document details how Quick Connect and the Active Roles Sync Service behaves (encryption-wise) when performing password synchronization between its supported systems.
-
Resolution
Quick Connect and the Active Roles Sync Service behaves in the following manner when synching passwords:
1. Password Sync between two AD instances where the Capture Agent is being deployed on both of the Source & Target servers, then the Salted HASH (i.e. MD5) will be transferred.
2. Password Sync between AD & Target Systems which support secure password transfer, password is encrypted as per Connector guidelines.
3. Password Sync between AD & Target Systems which do not support secure password transfer (i.e. LDAP Directory), the password is sent to the API as Plain Text. Therefore in this situation, the SALT is communicated between AD -> Sync Engine & Sync Engine, then to the Target System it is communicated as plain text.