AD Password Sync to OIM via SPML webservice without SSL
Our setup:
BigIP and AD Connector server have SSL but our BigIP offloads SSL.
Web server(OHS) and App Server doesn't have SSL configured.
Question :
When user changes password in AD (Target System) , SPML webservice(OIMProvisioning) does AD password sync with OIM. In this scenario, I would like to know if OIMProvisioning webservice payload will have user password in hashed format or in clear plain text? If it is in plain text, is SSL the way to go about?