Unrecognized device for some users in VIP Authentication Hub

Products

• Symantec Identity Security Platform - IDSP (formerly VIP Authentication Hub)

Issue/Introduction

Running VIP Authentication Hub, for 194 users, their devices get identified as "unrecognized".

The result is that these users are always required to complete two-factor authentication and they cannot benefit from the improved usability provided when connecting from a recognized device.

Environment

VIP Authentication Hub 3.4.4;

Resolution

For some users, the fingerprint is not passed to the PostUserRiskScoreEvaluator.

In the flow, make the device signature with the tag passed within the Custom Code.

Ensure the cookies _iat1, _iat01, _iat01_timestamp_ are kept (1).

Use them when doing write_tag()(1).

Additional Information

1. Cookies Used in VIP Authentication Hub