Data disposal of idle credentials in VIP Authentication Hub

Products

• Symantec Identity Security Platform - IDSP (formerly VIP Authentication Hub)

Issue/Introduction

We have a requirement to dispose of customer data that is no longer needed. I believe the VIP Authentication Hub database is storing customer contact details as required by the MFA flows. Does the product provide any solution to automatically dispose of customer contact/device/etc info? For example if the customer has not been active for X months. 

Environment

VIP Authentication Hub 3.4.x

Resolution

We have the following document related to Managing Credentials:
  Managing Credentials

Currently, in VIP Authentication Hub, there is no automatic feature to expire credentials. However, as described in the document above, we do provide APIs to update their status or delete them.

In the future VIP Authentication Hub 3.5 release, we plan to implement automatic expiration/purging of risk devices. Additionally, the Credential table includes a last_used column to indicate when a credential was last used. This allows us to utilize the available APIs to disable or delete inactive credentials.