Could you please let us know Allowed Characters for UserId field as part of Risk Eval Rest APIs mentioned below.
/org/{orgid}/user/{userid}/risk/evaluate
/org/{orgid}/user/{userid}/risk/postevaluate
Risk Authentication
Version : 9.1.x
To ensure that the system does not process invalid data, to enforce business rules, and to ensure that user input is compatible with internal structures and schemas, Risk Authentication validates the data that it receives from the APIs.
Refer the following Link for additional information about input data validations.