Okta.Sdk.Model.PasswordCredentialHash
October 22, 2025 ยท View on GitHub
Specifies a hashed password to import into Okta. This allows an existing password to be imported into Okta directly from some other store. Okta supports the BCRYPT, SHA-512, SHA-256, SHA-1, MD5, and PBKDF2 hash functions for password import. A hashed password may be specified in a password object when creating or updating a user, but not for other operations. See the Create user with imported hashed password description. When you update a user with a hashed password, the user must be in the STAGED status.
Properties
| Name | Type | Description | Notes |
|---|---|---|---|
| Algorithm | PasswordCredentialHashAlgorithm | [optional] | |
| DigestAlgorithm | DigestAlgorithm | [optional] | |
| IterationCount | int | The number of iterations used when hashing passwords using PBKDF2. Must be >= 4096. Only required for PBKDF2 algorithm. | [optional] |
| KeySize | int | Size of the derived key in bytes. Only required for PBKDF2 algorithm. | [optional] |
| Salt | string | Only required for salted hashes. For BCRYPT, this specifies Radix-64 as the encoded salt used to generate the hash, which must be 22 characters long. For other salted hashes, this specifies the Base64-encoded salt used to generate the hash. | [optional] |
| SaltOrder | string | Specifies whether salt was pre- or postfixed to the password before hashing. Only required for salted algorithms. | [optional] |
| Value | string | For SHA-512, SHA-256, SHA-1, MD5, and PBKDF2, this is the actual base64-encoded hash of the password (and salt, if used). This is the Base64-encoded `value` of the SHA-512/SHA-256/SHA-1/MD5/PBKDF2 digest that was computed by either pre-fixing or post-fixing the `salt` to the `password`, depending on the `saltOrder`. If a `salt` was not used in the `source` system, then this should just be the Base64-encoded `value` of the password's SHA-512/SHA-256/SHA-1/MD5/PBKDF2 digest. For BCRYPT, this is the actual Radix-64 encoded hashed password. | [optional] |
| WorkFactor | int | Governs the strength of the hash and the time required to compute it. Only required for BCRYPT algorithm. | [optional] |