//
// Licensed to the Apache Software Foundation (ASF) under one
// or more contributor license agreements.  See the NOTICE file
// distributed with this work for additional information
// regarding copyright ownership.  The ASF licenses this file
// to you under the Apache License, Version 2.0 (the
// "License"); you may not use this file except in compliance
// with the License.  You may obtain a copy of the License at
//
//   http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing,
// software distributed under the License is distributed on an
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
// KIND, either express or implied.  See the License for the
// specific language governing permissions and limitations
// under the License.
//

== Moving Forward

Once you have obtained a working installation of Apache Syncope using one of the methods reported above, you should consider 
reading the
ifeval::["{backend}" == "html5"]
http://syncope.apache.org/docs/reference-guide.html[Apache Syncope Reference Guide.]
endif::[]
ifeval::["{backend}" == "pdf"]
http://syncope.apache.org/docs/reference-guide.pdf[Apache Syncope Reference Guide.]
endif::[]
to understand how to configure, extend, customize and deploy your new Apache Syncope project.

Before deploying your Apache Syncope installation into production, it is essential to ensure that the default values for 
various security properties have been changed to values specific to your deployment. 

The following values must be changed from the defaults in the `security.properties` file:

* *adminPassword* - The SHA1 hash evaluation of the cleartext password, the default value of which is "password".
* *secretKey* - The secret key value used for AES ciphering. Only required if either:
** the value for "*adminPasswordAlgorithm*" is "AES" or
** the configuration parameter "password.cipher.algorithm" is changed to "AES" (See section 4.6.12 "Configuration Parameters" of
the Reference Guide for more information).
* *anonymousKey* - The key value to use for anonymous requests.
* *jwsKey* - The symmetric signing key used to sign access tokens (Syncope 2.0.3 onwards only). See section 4.4.1 "REST Authentication and 
Authorization" of the Reference Guide for more information.

[NOTE]
====
If you installed Syncope using either the <<gui-installer>> or the <<maven-project>> methods, then you will have already
supplied custom values for "*secretKey*" and "*anonymousKey*".

From Syncope 2.0.4 onwards, both installation methods will also query for "*jwsKey*", and the <<gui-installer>> will
prompt for the "*adminPassword*" as well. 
====
