salting passwords from IDP to Database

[Yasser Afifi]

Hello All,

I have IDP and SP working well now. I am authenticating against a simple
mysql database for testing. The mysql database contains a column for
password and another for username.

But since it is not a good idea to store plain passwords, i want to add
another column for a password salt. every user will have a randomly
generated salt attached to his password for added security.

In a normal java web app, this can be easy. But in shibboleth, I am not
sure how to add the salt to the password that the user will enter in the
login form (before checking against the salted password stored in the DB)

Any Suggestions (other than using a custom jsp log in form)?

Thanks a lot
Kind Regards,
Yasser
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160204/146a1e08/attachment.html>