Best Practices for Password Extensions

As with any directory technology, it is important to follow safe practices any time that you are using passwords. The following guidelines should be used when creating and using password extensions in Microsoft Identity Integration Server (MIIS):

• Do not write passwords to a file
• Do not pass user names or passwords in exception messages
• Do not use embedded SQL statements in passwords strings
• Do not use XML characters in password strings, such as "<" or ">"