// create user without password
ums.addUser("testcred", null);
// add a non-encoded password credential directly
InternalUserPrincipal internalUser = securityAccess.getInternalUserPrincipal("testcred");
ArrayList credentials = new ArrayList();
InternalCredentialImpl credential =
new InternalCredentialImpl(internalUser.getPrincipalId(),
"password", 0, DefaultPasswordCredentialImpl.class.getName());
credentials.add(credential);
internalUser.setCredentials(credentials);
securityAccess.setInternalUserPrincipal(internalUser,false);
}