Product: TIBCO Spotfire®
How passwords for Spotfire end users and service accounts are stored in TIBCO Spotfire database
This article will explain you how the passwords for Spotfire end users and service accounts are stored in Spotfire database.
When using Spotfire database authentication, Passwords for end users that are stored in the Spotfire database are not encrypted but hashed multiple times using the PBKDF2 hash algorithm.
Passwords for service accounts stored in the database (this cover all accounts configured through the various Spotfire Configuration and Administration interfaces such as passwords for LDAP service accounts, information link data sources and action logging) are encrypted with AES-128 encryption.