[ https://issues.apache.org/jira/browse/USERGRID-672?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14580758#comment-14580758 ]
ASF GitHub Bot commented on USERGRID-672: ----------------------------------------- Github user asfgit closed the pull request at: https://github.com/apache/incubator-usergrid/pull/253 > Portal stores the password of an app user after it is created in clear-text > --------------------------------------------------------------------------- > > Key: USERGRID-672 > URL: https://issues.apache.org/jira/browse/USERGRID-672 > Project: Usergrid > Issue Type: Bug > Reporter: Jeffrey > Assignee: ryan bridges > Fix For: 1.0.2 > > > After creating an app user their password is stored in clear-text in the > portal. It should not be persisted in the session or displayed in the portal > in clear-text > IMPORTANT NOTE: the current version of the Portal that we use (at Apigee) is > setup to enable the new Usergrid Central SSO, so if it is to be deployed > before Central SSO is enabled in prod, then you will have to disable central > SSO in the portal before deploying it. -- This message was sent by Atlassian JIRA (v6.3.4#6332)