Symantec VIP Intelligent Authentication data used from previous login when logging into an app tied to a different VIP JHash

Products

• VIP Service

Issue/Introduction

In an environment where 2 different VIP JHash in use (such as for production and testing), the Intelligent Authentication (IA) data from one login is used during the IA authentication when logging into an application where VIP MFA is tied to a different JHash when IA is enabled in both tenants and the same User ID exists in both VIP Manager tenants. 

Cause

The top-level domain set in the VIP Manager settings (example.com) is referenced during the IA flow in the VIP Manager tenant when the same User ID is exists in both tenants and same domain is designated with a sub-domain format (test.example.com). 

Resolution

Where the same domain is used in 2 separate VIP Manager tenants, add subdomains to the top-level domain. 

Example: