3509066 - Automatically re-hash the passwords (if it hashed with the deprecated algorithms) when the user login

In some cases, the legacy password hashing algorithm is used due to business needs(when the legacy.password.encoding.enabled property was set as true). As a configurable option, we could use the "password.encoding.auto.update.enabled" property to automatically re-encode the passwords that have been hashed with the deprecated algorithms when the user login.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

SAP Commerce Cloud 2211.26 and higher

Security, Password, password hashing algorithms, deprecate, MD5, salted MD5, PBKDF2, PBKDF2 with HMAC-SHA1 salted, plain text, SHA-1, SHA-256, SHA-512, re-hash, customer, employee , KBA , CEC-SCC-PLA-PL , Platform , How To