Hi connector team,

I noticed that password policy connector [1] is not using an identity claim
to store lastPasswordChangedTimestamp which is not correct. These kind of
claims should be identity claims. The reason for being an identity claim is
to use them even if the userstore is read only. If we use this claim in
this way, this claim will be useless if the userstore is read only. The
correct claim will look like "
http://wso2.org/claims/identity/lastPasswordUpdateTimeStamp";


[1] https://github.com/wso2-extensions/identity-outbound-auth-passwordPolicy
-- 
Hasintha Indrajee
WSO2, Inc.
Mobile:+94 771892453
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to