<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00007rrVqECAUOkta Classic EngineUniversal DirectoryAnswered2022-08-03T20:42:24.000Z2022-08-02T20:57:55.000Z2022-08-03T20:42:24.000Z

ChrisB.66209 (Customer) asked a question.

Is PBKDF2 algorithm supported for importing users using hashed password scenario?

PBKDF2 isn’t listed as supported in documentation. However when experimenting using postman, Okta’s API response does seem to recognize it because it is returning error for required attributes. If I provide required attributes, I receive 500 status with no detail.

 

Request (bogus sample):

 "profile":

   "firstName": "FName",

   "lastName": "LName",

   "email": "FName.LName@fake.com",

   "login": "FName.LName@fake.com",

   "mobilePhone": "111-111-0000"

 ,

 "credentials":

   "password" :

     "hash":

       "algorithm": "PBKDF2",

       "salt": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",

       "value": "YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY"

 

Response:

   "errorCode": "E0000001",

   "errorSummary": "Api validation failed: iterationCount",

   "errorLink": "E0000001",

   "errorId": "oaeYQKd2IU6Tme-UqK_wPgy1g",

   "errorCauses":

           "errorSummary": "iterationCount: The field cannot be left blank"

           "errorSummary": "iterationCount: Field must be at least 4,096"

           "errorSummary": "digestAlgorithm: The field cannot be left blank"

           "errorSummary": "keySize: The field cannot be left blank"


  • Mihai N. (Okta, Inc.)

    Hi @ChrisB.66209 (Customer)​ , Thank you for reaching out to the Okta Community!

     

     

    If you are using the Runner in Postman, the error seems to suggest that there might be a misconfiguration. 

    I recommend running just one call to confirm the API call configuration, then reviewing the Runner one.  

    Pasted Graphic 1 

     

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope it helps! 

    Expand Post
This question is closed.
Loading
Is PBKDF2 algorithm supported for importing users using hashed password scenario?