Encrypt FPS Answers for LDAP User Store for APS in Policy Server

Products

• CA Single Sign-On
• SITEMINDER

Issue/Introduction

Is it possible to store the answer for FPS (Forget Password Services) verification stage encrypted. If yes, how is that possible?

 

Resolution

Encryption of the answer is not available out of the box with the APS for LDAP User Store.

However, this functionality can be implemented via the custom add on module called SmAPSEx.

The answer is the text that FPS will match against the user input. This information is generally not encrypted, but can be, either using SmAPSEx or, in the case of ODBC directories, using stored procedures (1).

 

Additional Information

 

1. Forgotten Password Services (FPS) Data