Provide first class support for dynamic password migration from external systems

[ThaminduDilshan]

Is your feature request related to a problem? Please describe.
When a customer is onboarding in cases where they are migrating from an existing IAM solution, it is required to move their user base to WSO2 Identity Server. In most of these systems, users have credentials (passwords) in a system preferable manner and are unable to export them to a different system. One option is to make a forceful password reset, however it creates user friction and hassle for the consumers. One demanded UX is to dynamically update the password in IS as the user completes login by verifying the credentials from the existing system.

One major challenge is there’s no standardized way to communicate with external systems in these sorts of requirements. Therefore when dealing with external systems, we need to handle different types of request and response formats.

Describe the solution you would prefer
The solution utilizes a conditional authentication script and an external REST service which exposes a few API endpoints (ex: Choreo) to perform the user authentication with the existing system.

Additional context

[ThaminduDilshan]

Related PRs:

• Add conditional authentication functions for dynamic password migration wso2-extensions/identity-conditional-auth-functions#158
• Add waiting page template for "prompt" conditional function identity-apps#6030

Version bump PRs

• [Release] [GitHub Action] Update package versions identity-apps#6319
• Bump conditional auth functions and identity apps core version #20427