How to retrieve security question and answers from the strong auth or webfort database in plain text format

Products

• CA Advanced Authentication
• CA Strong Authentication
• CA Risk Authentication

Issue/Introduction

This document explains how to retrieve the question and answers i.e QnA which are configured during the Strong Auth authentication configuration from the Strong Auth or Webfort database in clear text format.

Environment

Product
• CA Advanced Authentication 
Releases
• CA Strong Authentication  :  Release 8.x,9.x
Components
• Strong Auth(Arcot Webfort):WEBFRT

Resolution

Please find  below a test web service call for retrieving the question  and answers  in clear text:
 
<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:msgs="http://ws.arcot.com/WebFortAuthAPI/7.0/msgs" xmlns:xsd="http://ws.arcot.com/WebFortCommonAPI/7.0/xsd">
<soap:Header/>
<soap:Body>
<msgs:GetQuestionsRequest>
<!--Optional:-->
<xsd:clientTxnId>123456</xsd:clientTxnId>
<msgs:userName><Username></msgs:userName>
<!--Optional:-->
<msgs:orgName><Orgname></msgs:orgName>
<!--Optional:-->
<msgs:fetchAnswers>1</msgs:fetchAnswers>
</msgs:GetQuestionsRequest>
</soap:Body>
</soap:Envelope>
 
 
In above call, Username is the name of the user in the user directory. OrgName is the organization name and the value 1 for fetchAnswers means to fetch the answers as well.
 
Before you use this web service call you need , you will need to check the "Enable Caller Verification :" box under QnA  Autentication in the arcot admin console.
 
Below are the steps to perform the same.
 
1) Login to admin console and open the organization.
2) Click the "Strong Authentication Configuration" tab.
3) On left pane click "Authentication" link under QnA
4) On next page you will see the Enable Caller Verification : check box. Check this and click save at the bottom and then refresh the cache and then run the web service call.