Response with AdditionalOutput field present as a null tag in the XML response does not conform to Arcot's own WSDL definition

Products

• CA Strong Authentication

Issue/Introduction

Customer observed that in the WebFort response, the AdditionalOutput field is present but comes as a null tag in the XML response. This behavior does not conform to Arcot’s own WSDL definition of the response. Depending on the credential type, this may or may not cause functional issues — for example, OTP works fine, but other flows may fail.

Environment

Product: Strong Authentication / WebFort Version: 9.1.5.1

Cause

Customer confirmed the AdditionalOutput field appears in the SOAP response but with no value (null). Parsing issue noted when field is expected to contain valid name-value pairs.

Resolution

We identified that an additional entry is required in the arcotcommon.ini file to enable AdditionalOutput. 

Please ensure the following entry exists in your arcotcommon.ini:

[arcot/webfort] AR_WF_STATS_SRT_TAG=1
After adding this tag in your environment, you will successfully view it in AdditionalOutput.

Additional Information

Here’s the request:-

 

<SOAP-ENV:Envelope xmlns:SOAP-ENV=http://www.w3.org/2003/05/soap-envelope>

    <SOAP-ENV:Body>

        <ns0:CredentialRequest xmlns:ns0=http://ws.arcot.com/WebFortIssuanceAPI/7.0/msgs>

            <ns0:userName>AAA</ns0:userName>

            <ns0:orgName>DEFAULTORG</ns0:orgName>

            <ns0:upInput>

                <ns1:profileName xmlns:ns1=http://ws.arcot.com/WebFortIssuanceAPI/7.0/xsd>PIN_PROFILE</ns1:profileName>

                <ns1:password xmlns:ns1=http://ws.arcot.com/WebFortIssuanceAPI/7.0/xsd>XXXXXX</ns1:password>

            </ns0:upInput>

            <ns0:additionalInput>

                <ns1:pairs xmlns:ns1=http://ws.arcot.com/WebFortCommonAPI/7.0/xsd>

                    <ns1:name>AR_WF_CALLER_ID</ns1:name>

                    <ns1:value>ARCOT_WEB_ADAPTER|||</ns1:value>

                </ns1:pairs>

                <ns1:pairs xmlns:ns1=http://ws.arcot.com/WebFortCommonAPI/7.0/xsd>

                    <ns1:name>DOB</ns1:name>

                    <ns1:value>01011970</ns1:value>

                </ns1:pairs>

            </ns0:additionalInput>

        </ns0:CredentialRequest>

    </SOAP-ENV:Body>

</SOAP-ENV:Envelope>

 

 

<SOAP-ENV:Envelope xmlns:wfiss50types=http://schemas.arcot.com/regfort/v1/types xmlns:xsd=http://www.w3.org/2001/XMLSchema xmlns:wfiss60xsd=http://ws.arcot.com/WebFortIssuanceAPI/7.0/xsd xmlns:SOAP-ENC=http://www.w3.org/2003/05/soap-encoding xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance xmlns:wfiss60msgs=http://ws.arcot.com/WebFortIssuanceAPI/7.0/msgs xmlns:wfiss60soap11=http://ws.arcot.com/WebFortIssuanceAPI/7.0/wsdl/IssuanceAPISOAP11Binding xmlns:wfauth60msgs=http://ws.arcot.com/WebFortAuthAPI/7.0/msgs xmlns:wfiss541soap12=http://schemas.arcot.com/regfort/v2/RegFortAPISOAP12Binding xmlns:wfauthx541soap12=http://schemas.arcot.com/webfort/v2/AuthXActionServiceSOAP12Binding xmlns:wfauthx541soap11=http://schemas.arcot.com/webfort/v2/AuthXActionServiceSOAP11Binding xmlns:wfiss541soap11=http://schemas.arcot.com/regfort/v2/RegFortAPISOAP11Binding xmlns:wfiss50soap12=http://schemas.arcot.com/regfort/v1/RegFortAPISOAP12Binding xmlns:wfiss50soap11=http://schemas.arcot.com/regfort/v1/RegFortAPISOAP11Binding xmlns:wfiss60soap12=http://ws.arcot.com/WebFortIssuanceAPI/7.0/wsdl/IssuanceAPISOAP12Binding xmlns:wfauth541types=http://schemas.arcot.com/webfort/v2/types xmlns:wfautha541soap11=http://schemas.arcot.com/webfort/v2/AuthAccessorServiceSOAP11Binding xmlns:wfauth50types=http://schemas.arcot.com/webfort/v1/types xmlns:wfauth60soap11=http://ws.arcot.com/WebFortAuthAPI/7.0/wsdl/AuthAPISOAP11Binding xmlns:cx=http://ws.arcot.com/WebFortCommonAPI/7.0/xsd xmlns:wfauth60soap12=http://ws.arcot.com/WebFortAuthAPI/7.0/wsdl/AuthAPISOAP12Binding xmlns:wfautha541soap12=http://schemas.arcot.com/webfort/v2/AuthAccessorServiceSOAP12Binding xmlns:wfiss541types=http://schemas.arcot.com/regfort/v2/types xmlns:wfauth50soap12=http://schemas.arcot.com/webfort/v1/ArcotWebFortWebServiceSOAP12Binding xmlns:wfauth50soap11=http://schemas.arcot.com/webfort/v1/ArcotWebFortWebServiceSOAP11Binding xmlns:wfauth60xsd=http://ws.arcot.com/WebFortAuthAPI/7.0/xsd xmlns:SOAP-ENV=http://www.w3.org/2003/05/soap-envelope>

    <SOAP-ENV:Body>

        <wfiss60msgs:CredentialResponse>

            <wfiss60msgs:upOutput>

                <wfiss60xsd:userName>AAA</wfiss60xsd:userName>

                <wfiss60xsd:orgName>DEFAULTORG</wfiss60xsd:orgName>

                <wfiss60xsd:status>1</wfiss60xsd:status>

                <wfiss60xsd:remainingUsageCount>-1</wfiss60xsd:remainingUsageCount>

                <wfiss60xsd:createTime>2025-08-12T11:32:00.000Z</wfiss60xsd:createTime>

                <wfiss60xsd:lastUpdatedTime>2025-08-12T13:17:27.000Z</wfiss60xsd:lastUpdatedTime>

                <wfiss60xsd:validityStartTime>2025-08-12T11:32:00.000Z</wfiss60xsd:validityStartTime>

                <wfiss60xsd:validityEndTime>2050-08-12T11:32:00.000Z</wfiss60xsd:validityEndTime>

                <wfiss60xsd:numberOfFailedAuthAttempts>0</wfiss60xsd:numberOfFailedAuthAttempts>

                <wfiss60xsd:profileName>PIN_PROFILE</wfiss60xsd:profileName>

                <wfiss60xsd:profileVersion>1011</wfiss60xsd:profileVersion>

            </wfiss60msgs:upOutput>

            <wfiss60msgs:transactionDetails>

                <cx:message>The operation was successful.</cx:message>

                <cx:reasonCode>0</cx:reasonCode>

                <cx:responseCode>0</cx:responseCode>

                <cx:transactionID>2184078</cx:transactionID>

                <cx:additionalOutput/>

            </wfiss60msgs:transactionDetails>

        </wfiss60msgs:CredentialResponse>

    </SOAP-ENV:Body>