Mitigating Legacy Google FCM APIs Deprecation in Advanced Authentication

Products

• CA Risk Authentication

Issue/Introduction

Advanced Authentication utilizes the legacy Google Firebase Cloud Messaging (FCM) APIs for delivering push notifications to mobile applications via its Software Development Kit (SDK). However, due to the deprecation of the Google FCM APIs, deployments relying on these APIs have been impacted. To address this issue, the Advanced Authentication product team has developed an AFM/Adapter patch. This patch replaces the deprecated FCM APIs with the HTTP v1 APIs, ensuring continued functionality and compatibility with the latest standards.

Environment

Advanced Authentication: versions 9.1, 9.1.01, 9.1.02, 9.1.03, 9.1.04, and 9.1.5

Cause

The deprecated FCM legacy APIs will not be supported after June'2024

Resolution

Steps to Mitigate:

1. Before proceeding with the migration, ensure that your Symantec Advanced Authentication deployment is compatible with the new HTTP v1 APIs. Review the system requirements and compatibility matrix to confirm compatibility.

2. Ensure that you have the latest version of the patch to benefit from any bug fixes or enhancements. The patch can be downloaded from My Download page of the Broadcom Support website at https://support.broadcom.com. On the My Downloads page, go to the Solutions section and download the Symantec-AdvancedAuth-Adapter-9.1.x-FCM-Patch. Instruction on how to apply is available along with the patch.

3. Once you have obtained the AFM/Adapter patch, follow the provided installation instructions. Typically, the installation process involves deploying the patch to your Advanced Authentication environment. Ensure to adhere to any pre-requisites or dependencies specified in the readme file.

4. After applying the patch, thoroughly test the functionality of push notifications in your Symantec Advanced Authentication deployment. Verify that push notifications are successfully delivered to mobile applications using the new HTTP v1 APIs. Conduct comprehensive testing to ensure that all use cases are functioning as expected.