After enabling Reverselookup the deviceid is not returned for anything other than Login action

Products

• CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)
• CA Strong Authentication
• CA Rapid App Security
• CA Risk Authentication
• CA Advanced Authentication

Issue/Introduction

The Reverse Lookup feature was enabled in the product to mitigate Step-ups caused by the absence of DeviceID, and it is functioning as expected.

Custom Actions such as FORGOTPWD, EVAL, and others were created. When Reverse Lookup is enabled and an action other than Login is selected, the DeviceID field is missing in the Evalrisk response. However, when Reverse Lookup is disabled, the DeviceID field is correctly populated with its value.

Environment

Release : 9.1

Component : RiskMinder(Arcot RiskFort)

Risk Authentication

Cause

In MFPMISMATCH rule not all ACTIONS are enabled and that causes this issue.

Resolution

To address this issue Enable all ACTIONS from the MFPMISMATCH rule and that should resolve this and DeviceID field will be populated for specific ACTION or all ACTIONS. Here is a screen shot