Attempting to disable the credential state for an unsupported credential type correctly fails, but returns a Success message. (VIPAuthentication Services 2019.June.1)

Products

• VIP Authentication Service

Issue/Introduction

If you use the credentialState element to try to disable a credential through the API and provide STANDARD_OTP as the credentialType but also provide a Trusted Device credential ID, the VIP Service correctly does not disable the credential. However, the VIP Service returns a Success message.

Resolution

The credentialState element is supported for STANDARD_OTP credential types only (physical token and software token credentials, including VIP Access for Mobile). Do not use the credentialState element for any other credential type.