#581 Recovered: Allow one-time password to be used for SP registration
Closed: Fixed by t0xic0der. Opened by t0xic0der.

With ipsilon-client-install, it is currently possible to register the SP in the Ipsilon server if you have the admin password. There might be cases where we want to automate installation of a SP, but we don't want to embed the admin password in the automation scripts. We should invistigate using a one-time password approach, similar to what FreeIPA supports for IPA client installation. The flow would be:

  • Admin user pre-creates an SP in Ipsilon without metadata and sets/generates a random one-time password.

  • SP installation is performed using ipsilon-client-install, specifying the SP name and matching one-time password.


This issue ticket was originally removed from the tracker as it clashed with the pull request.
See upstream ticket for migration details.


Metadata Update from @t0xic0der:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Metadata