Importing users with pbkdf2 hashed passwords

Help
,
2

For anyone who stumbles on this topic.

I was able to get this resolved with the help of Auth0 support.

There were two issues with my import:

  1. The “hash”:{“value”:} was an incorrect format. I needed to split the salt out and add it to the beginning of the string (as indicated in the documentation).
  2. The key length I was passing in was incorrect. I was using the default/example value of l=64 but the actual ASP.NET v2 identity key is only 256 bits or 32 bytes so the value needed to be l=32

For reference this was the correct format:

“value”: “$pbkdf2-sha1$i=1000,l=32${salt}${hash}”

3 Likes