jgzg7 (jgzg7) asked a question.
Does okta Rehash passwords when we create User with imported hashed password
Hi, we are trying to import users from a different data store using this guide: https://developer.okta.com/docs/reference/api/users/*create-user-with-imported-hashed-password
When the user logs in for the first time, does okta rehash the password? Or is the original imported hashing algorithm kept?
Context: we would like okta to rehash the passwords in case our imported hashing algorithm isn't secure in the future.
Hello @jgzg7 (jgzg7) Thank you for posting on our Community page!
At this time Okta does not re-hash the password automatically, however you could re-hash the password though API. Please see our doc below:
https://developer.okta.com/blog/2021/03/05/ultimate-guide-to-password-hashing-in-okta#hash-only-1
Thank you for reaching out to our Community and have a great day!
--
Join the discussion for the Ask Me Anything online event on May 23, 2024 with Okta Tactical Edge Product Experts