Welcome Guest! Log in
Stambia versions 2.x, 3.x, S17, S18, S19 and S20 are reaching End of Support January, 15th, 2024. Please consider upgrading to the supported Semarchy xDI versions. See Global Policy Support and the Semarchy Documentation.

The Stambia User Community is moving to Semarchy! All the applicable resources have already been moved or are currently being moved to their new location. Read more…

Managing passwords in Stambia DI

    A great number of technologies require a password-based authentication: database connections, file transfer protocols (FTP, SFTP, SCP), email servers, SSH servers, web services, etc.

    This article provides information about how to handle passwords in the Stambia DI solution.

    Do not store clear passwords in variables

    Variable values can be consulted in the Session's logs, so it is not recommended to store clear password in variables.

    There are many practical and secure ways do define passwords in Stambia DI, depending on the context.

    Consider using a Metadata

    Most technologies which can be manipulated in Stambia DI, have their own Metadata model.

    It is generally a good idea to define authentication parameters (user and password) in a Metadata:

    • Stambia DI will store them in a specific encrypted format
    • Multiple Configurations can be defined with the credentials for each environment (dev, test, production...)
    • At deployment time, these Metadata parameters can be redefined easily and securely

    Note: if you cannot find the right Metadata for your technology, please contact the Support team.

    When developing processes, simply drag and drop your Metadata on the desired Action. The Action will inherit the credentials from the Metadata.

    Encrypt passwords

    When you need to pass a password as a parameter to an action or a delivery, always use the encrypted value.

    Use the Runtime command encrypt <clearpassword> to get the encrypted value:

    > encrypt mypassword

    This value can be used in the "Encrypted Password" parameters of the action which requires it.

    It can also be used in the Runtime's properties, when defining Log database credentials or Runtime security parameters.


    Using H2 Engine to test, invoke, ...

      The H2 Database Engine shipped with the designer and runtime has a one column one row table named dual.

      It can be very usefull for testing, or for some use cases of integration.

      For example, a source is needed to invoke a Web Service, even if we want to invoke it only to retrieve the result, and we are not using the data from the source.

      It can be confusing to need a table for that, but it's how it works actually: the node of the Web Service must be mapped from a source table, to have the Integration Template available for selection.

      So here comes the tip of this article. To avoid having to create or use a table just for that you can use the embedded H2 Engine.

      The H2 Database Engine

      You can download an example of metadata using the H2 Database Engine archive here (881 B) .

      It is using a metadata query, available since S18.0.3


      Note : A metadata query is a SQL query, which can be reversed and used like a datastore.

      The advantage of this solution is that the H2 Engine metadata can be configured to use an in memory H2 Database. It will only be present during the execution of the Session.
      And you can use this metadata query in any other mapping which need a source just for the invocation, or testing with only one row, ...

      The H2 "in-memory" database does not need the Runtime's internal H2 database to be started. It is directly available in the Runtime or in any "startdelivery" Stambia session even if the Runtime is not running at execution time.

      To accomplish that:

      1. A JDBC url similar to jdbc:h2:mem:${/CORE_SESSION_ID}$ must be used.
      2. Create a query which is a select on the H2 dual table. select * from dual or select 1 field from dual for example.

      Then you can use this in mappings.

      Example :


      The oneline query will be generated only during the execution of the mapping.




      Suggest a new Article!