Hi everyone! If I use the LDAP connector for authentication, what would be the process for changing passwords in Descope? How is this handled within my application, considering we use the Vue.js SDK to authenticate against our API?

Hi @Edwind Richzendy Contreras Soto What do you mean by "changing passwords in Descope"? currently the LDAP connector only support the

search_user

and

authenticate

(which validate the user/pass against the ldap server) commands so they dont change any password.. can you please elaborate some more on your use case

Without using LDAP, Descope assumes the entire user authentication and validation process; it stores the keys and performs password changes when they occur. Correct me if I'm wrong, but that's what I understand. In the case of using LDAP, Descope no longer maintains password storage. So, how is the password change flow handled now?

Yea Descope only store the hashes for the Descope password (and not for the LDAP password) which means those are two different passwords mechanism (which are not synced), mostly the use case is that Descope will be used as a second factor auth (where the first is LDAP) or extending the login journey with other connectors, etc..

I assume that the encryption algorithm within Descope cannot be chosen and is perhaps proprietary (or internal). So, when creating users in Descope, do you think it would be better to set the same password in Descope as the one set in LDAP, just to maintain the same one on both sides even though Descope wouldn't use it? In LDAP, we use SHA-256.

It can be that I'm missing something.. but why do you need to have a password in Descope if you are not going to use it? (in general you should have password in Descope only if you are using password as an authentication method for your users). When using the LDAP connector (with the authentication action) you should just pass in a username and password and we just forward it to the LDAP server

I just thought it was necessary for a user to have a password when creating them in Descope

Hi, you can create users without passwords.