User password storage documentation

[David_Crosley]

Good evening,

Where can I find version 12 documentation on how user passwords are stored and protected in the DB?

I'm sure they're salted and hashed, but I need audit evidence to support.

Thanks!

David

[Warren_Kopp · Accepted solution]

Hi David, 

Unfortunately we do not have any public documentation at this level of technical detail, but I'll email you separately to see if we can get you the information required for your audit. 

Regards

[Rob_van_de_Flie]

Hi Warren,

I would also be very interested in this information as it is a requirement to have strong encryption in an opportunity I am working on.

[Scott_Sopp]

Warren,

Where in the Database and what values determine a user account to be set for integrated vs Standard login. We are going through a security audit and want to get all of the user accounts to only use integrated authentication, but there seems to be nowhere that I can report off of to verify compliance that all accounts have been updated. Also, that new accounts are being correctly setup.

Thanks

[AdamShaneHyland]

Hi @Scott ,

As Warren had mentioned, this is proprietary information and not publicly available at this time.  If you need further assistance, I would recommend working with your first line of support.

Take care.