← Back to plugin index

Persister IAK Verifier
Description
An IAK (initial activation key) verifier based on a password hash function and a credential persister.

This plugin uses a CredentialPersister plugin to read a hash value of the IAK. The hash value is checked using the configured hash function.

If the IAK is successfully verified, the hash value is cleared (null value set).

Type name
PersisterIakVerifier
Class
com.airlock.iam.core.misc.impl.authen.PersisterIakVerifier
May be used by
Credential Data mTAN Handler
Properties
Credential Persister (credentialPersister)
Description
The credential persister plugin used to verify (and invalidate) the IAK.
Attributes
Plugin-Link
Mandatory
Assignable plugins
Active Directory Connector Cipher Credential Persister Database Credential Persister Dummy Credential Persister LDAP Connector LDAP Credential Persister Property Credential Persister Static Credential Persister
Hash Function (hashFunction)
Description
The password hash function used for verification of the IAK.

NOTE: Some password hashes, such as SHA 256 Password Hash or Scrypt Password Hash, produce binary output. If one of these is used, make sure the persistence layer supports binary data in the hash field and the corresponding persistence plugins (e.g. Database User Store or Ldap Connector) are configured to treat hash values as binary values.
In case the persistence layer expects a string, encode the password hash by wrapping it with an encoder. To achieve this, use the Password Hash Configuration plugin and specify the hash function (such as Scrypt Password Hash) together with the desired encoder. We recommend using the Base64 Password Hash Encoder.

Attributes
Plugin-Link
Mandatory
Assignable plugins
AWS KMS Password Hash Argon2id Password Hash Bcrypt Password Hash Combined Password Hash Encrypted Password Hash History Password Hash Identity Password Hash LDAP Password Hash MD5 Base64 Password Hash MD5 Hex Password Hash Multi Password Hash (LDAP-style) Password Hash Configuration SHA1 Base64 Password Hash SHA1 Hex Password Hash SHA1 Password Hash SHA256 Base64 Password Hash SHA256 Hex Password Hash SHA256 Password Hash Scrypt Password Hash
YAML Template (with default values) 

type: PersisterIakVerifier
id: PersisterIakVerifier-xxxxxx
displayName: 
comment: 
properties:
  credentialPersister:
  hashFunction: