Hello everyone,
we are currently testing One Identity Manager 10 and have encountered an issue with password provisioning to Active Directory.
In our scenario, the password is entered by the user in the UI into our custom field CCC_Password. It is then transferred to the central password and subsequently provisioned to the AD user account.
The flow is therefore:
UI (CCC_Password )→ Central Password → AD account
The password is transferred correctly from the custom field to the central password. However, the password that is ultimately set on the AD account does not match the expected central password.
During our tests, we found that when we remove the encryption of the central password, the correct password is provisioned to AD.
This raises a security concern for us, as we do not want to store or process the central password unencrypted as a workaround.
Could you please clarify whether the handling of encrypted central passwords for AD provisioning has changed in Identity Manager 10?
Is an encrypted central password still supported for this scenario, and what is the recommended secure way to pass it to AD?
Has anyone experienced similar behavior after upgrading to version 10?
Thanks in advance!
Best regards,
N