Validation of Mobile Arcot OTP(CA MobileOTP) token fails over REST API, unclear what to put into authTokenType.

Products

• CA Strong Authentication

Issue/Introduction

First of all CA Mobile Authenticator credential is active, I can retrieve it through REST

curl -X GET "https://host:8443/aa-restapi/ca/advancedauth/v1/org/adprod/user/testuser/credential" -H "accept: application/json" -H "authToken: 260f9e66-4208-46fe-8c36-36c5b37cff90"

{
    "org": "ADPROD",
    "id": "testuser",
    "txnId": "56926",
    "responseCode": 0,
    "responseMessage": "The operation was successful.",
    "cred": {
      "credParams": {
        "roamStatus": "false",
        "counterOffset": "0",
        "otpType": "TOTP",
        "card": null
      },

      "credType": "CAMOBILEOTP",
      "issuanceProfile": "TOTPArcotOTPProfile",
      "remainingUsageCount": -1
    },
    "validityEndTime": "2049-12-31T23:58:59.00Z",
    "validityStartTime": "2023-02-14T00:12:43.00Z",
    "credStatus": "ACTIVE",
    "numOfFailedAttempts": 0
  }

When calling token validation

curl -X POST "https://host:8443/aa-restapi/ca/advancedauth/v1/org/adprod/user/testuser/credential/verify" -H "accept: application/json" -H "authToken: 260f9e66-4208-46fe-8c36-36c5b37cff90" -H "content-type: application/json" -d "{ \"org\": \"adprod\", \"id\": \"testuser\", \"token\": \"613923\", \"authTokenType\": \"camobileotp\"}"

The response is

{  
"errorMessage": "Unsupported Credential.",  
"errorCode": "00005803",  
"detailedMessage": null
 } 

Restapi.log
2023-02-15 12:40:10,760 [https-jsse-nio-8443-exec-2] INFO  authentication.impl.AuthenticationServiceImpl(307) [] -> TOTP is not supported
2023-02-15 12:40:46,686 [https-jsse-nio-8443-exec-5] INFO  authentication.impl.AuthenticationServiceImpl(142) [] -> *********** SDK Already Initailized ***** Ignoring the initialize call ****
2023-02-15 12:40:46,687 [https-jsse-nio-8443-exec-5] INFO  authentication.impl.AuthenticationServiceImpl(307) [] -> CAMOBILEOTP is not supported
2023-02-15 12:42:55,014 [https-jsse-nio-8443-exec-5] INFO  authentication.impl.AuthenticationServiceImpl(142) [] -> *********** SDK Already Initail

Environment

Release : 9.1.x

Product: Strong Authentication

Resolution

AuthTokenType is a kind of token which can be generated after a successful authentication of a credential. In case of Successful CA Mobile OTP Authentication, you can generate a token type as NATIVE, this is not mandatory so you can ignore that part as well but put NATIVE as the value and test.

Here is an example from my environment-