Hiding generated password in the request queue

Hi all,

I'm using a workflow parameter in a sync rule to call out to a workflow which generates an initial password for a new user. The workflow uses the MIMWAL 'GenerateRandomPassword' function to generate the password and pass it back to the sync rule to flow to unicodePwd; all good.

The problem I have is that the password returned by the workflow appears in the ERE creation request in the request queue. Our security folks aren't too keen on this... Is there any way to generate a proper random password without the result appearing in the request queue?

Thanks,

Lee.