Credential Masking Feature
Novell Cool Solutions: Question & Answer
Reader Rating 
Q:
JR wrote: Can you point us to some details on the credential masking feature added in iChain 2.2?
A:
Here is an extract of iChain 2.2 manual: >Setting Up Web Single Sign-on Services >Setting Up Form Fill, p. 128:
Form Fill Enhances Data Security
Form Fill reduces the possibilities of exposing sensitive data during the auto posting by adding the tag <maskedPost/>. Form Fill replaces text fields (for example, user name, password, etc.) with some fixed values and sends them to the browser. When Form Fill receives the data by auto posting from the browser, it replaces back the user's credentials and then forwards them to the Web application. To use this feature, you need to change the <post/> tag to <maskedPost/> in the rule. If users use SSL between iChain and the browser, they do not need to enable this feature because the data is already secured by SSL.
NOTE: If users can see the form on the browser (for example, during the first usage, or if there is an error), the users will see the real data (without fixed masked values).
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com