Hi Geoff,
This is definitely doable! You might need to create a new custom action which converts a string (the input from the catalog item) into a Password2 type field. Luckily, I've whipped one of these up already! Here's one I prepared earlier:
Input of a string:
script step to encrypt it:
Output items to pills:
IN this case I've opted to output it as both a password2 and plaintext, in case you wanted to email it, but it might be worth adding a "true/false" input to show plaintext or not, and checking that in your script.
Remember, anything where you save a password is inherently unsafe, and this will write the passwords to a flow context which will be accessible by anyone with read access to flows.
Hope that helps,
Andrew
Following worked. Just created a variable "password" of type "Masked". Used GlideEncrypter() to encrypt password to Password2. Was able to update the password and then login with the new password. Check to make sure the old password resulted in an error.
