PIN in CA Mobile Authenticator app Push Notification

Products

• CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)
• CA Strong Authentication

Issue/Introduction

On the CA Mobile Authenticator app, when creating a user account, user is required to enter and confirm a PIN.

When generating the One-Time Code, user needs to enter this PIN.

Question 1: For an account that is enrolled to receive Push Notification, when a notification is received, will the user be prompted to enter the PIN before being able to select the Approve or Deny options?

Question 2: If the answer to the above is YES, then when user enters wrong PIN, will the app prompt user to reenter PIN or will the app allow user to select Approve or Deny?

Note that for One-Time Code, the passcode is still generated when incorrect PIN is entered, however the OTP verification will fail at the login page of the protected application. 

Environment

Release : 9.1

Component : AuthMinder(Arcot WebFort)Strong Authentication

Resolution

PIN is not used in Push Notification OOTB. Local Authentication method is also not supported.