Passwordless Credentials (when Enable Passwordless Credentials is set to Yes) not working through the My VIP portal after upgrading to Enterprise Gateway 9.11.1

Products

• VIP Service

Issue/Introduction

Authenticating to My VIP with a Passwordless Credential (when Enable Passwordless Credentials is set to Yes) no longer works after upgrading to VIP Enterprise Gateway 9.11.1.

 

Note: This does not affect My VIP access through a third-party SSO. 

Cause

Extra lines may have been added to the My VIP configuration file (ssp.conf) during the upgrade to VIP Enterprise Gateway 9.11.1. This can affect passwordless credential functionality that was enabled prior to the upgrade when accessing the My VIP portal through the VIP Enterprise Gateway.

Resolution

• Log into the VIP Enterprise Gateway console
• Select the Identity Provider tab and stop the Self Service Portal IdP Configuration service.
• Create a copy of the ssp.conf file located in the <VIP_EG_install>\IDP\services\SSP\conf directory. 
• Open ssp.conf file using Notepad.exe or other text editor. 
• Locate the following:

  samlidp.fido.enabled = Yes/No
  samlidp.vipussoap.queryendpoint = https://userservices-auth.vip.symantec.com/vipuserservices/QueryService_1_10
  samlidp.vipussoap.authendpoint = https://userservices-auth.vip.symantec.com/vipuserservices/AuthenticationService_1_10
  samlidp.fido.enabled = Yes/No
  samlidp.vipussoap.queryendpoint = https://userservices-auth.vip.symantec.com/vipuserservices/QueryService_1_10
  samlidp.vipussoap.authendpoint = https://userservices-auth.vip.symantec.com/vipuserservices/AuthenticationService_1_10

• Remove only the 3 duplicate lines (shown as blue in the above example).
• Save the file, then restart the Self Service Portal IdP Configuration service.
• If necessary, stop the service, enable the Enable Passwordless Credentials option, then restart the service. The ssp.conf file will be updated accordingly.