Compatibility Issues of AA( Advanced Authentication) SDK (Version 8.2.4.1) with Android 14 (API Level 34) and Suggested Mitigation Steps

Products

• CA Risk Authentication
• CA Advanced Authentication
• CA Advanced Authentication - Risk Authentication (RiskMinder / RiskFort)

Issue/Introduction

After a thorough investigation, it has been determined that the Advanced Authentication (AA) SDK (Version 8.2.4.1) is not fully compatible with Android 14 (API Level 34). The following key issues were identified:

• Mobile Applications:

  • Customer applications that integrate the AA SDK (Version 8.2.4.1) may experience compatibility issues when targeting API Level 34. This could lead to functional disruptions or failures in the applications when running on devices with Android 14.

• AA SDK (Version 8.2.4.1):

  • The existing AA SDK has not been rebuilt or specifically tested for Android 14. Due to the changes introduced in the Android 14 platform, there is a high likelihood that modifications or a complete rebuild of the SDK will be required to ensure full compatibility.

Environment

Affected Version & Environment:

• CA Risk Authentication Version: 9.1 SP5
• AA SDK Version: 8.2.4.1
• Target Android Version: Android 14 (API Level 34)

Cause

Business Impact:

Failure to address this issue could result in:

• Functional disruptions in mobile applications integrated with AA SDK when they are executed on devices running Android 14.
• Potential loss of application functionality or service outages for end users, leading to a negative business impact and degraded user experience.

Resolution

A hotfix has been provided to address the identified issues. The hotfix addresses the following areas:

1. Mobile Applications:

   • Conduct a detailed assessment of the mobile applications to identify potential compatibility issues with Android 14.
   • Implement the necessary updates or patches to ensure that the applications function correctly on devices running Android 14 (API Level 34).
   • Thorough testing should be performed to validate that the mobile applications continue to work as expected post-patch.

2. RBA( Risk-Based Authentication) SDK (Version 8.2.4.1):

   • Rebuild the existing RBA SDK (Version 8.2.4.1) to ensure full compatibility with Android 14 (API Level 34).
   • Perform comprehensive testing of the rebuilt SDK on Android 14 devices to confirm its functionality.

To ensure continued compatibility and functionality of your applications with Android 14, it is crucial to update your mobile applications and SDK integration with the provided hotfix for AA SDK (Version 8.2.4.1). We recommend applying the attached hotfix on the rebuild status and performing rigorous testing on Android 14 devices.