Sample SOAP request/response to retrieve the AccountId for a user in Advanced Authentication

Products

• CA Strong Authentication
• CA Advanced Authentication
• CA Advanced Authentication - Risk Authentication (RiskMinder / RiskFort)
• CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)

Issue/Introduction

In Advanced Authentication, users are often associated with multiple account types (such as RADIUS or LDAP). This article provides a sample SOAP request and response to retrieve a specific user's details, including their AccountId, by leveraging the ArcotUserRegistrySvc web service.

Environment

Symantec Advanced Authentication 9.1.x

Resolution

To ensure the response includes account-level information, the <ns:includeAccounts> filter must be set to 1 (True).

Sample Request: retrieveUserRequest

XML

 

<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:msgs="http://ws.arcot.com/ArcotUserRegistrySvc/1.0/msgs" xmlns:ns="http://ws.arcot.com/UserSchema/1.0">
   <soap:Header/>
   <soap:Body>
      <msgs:retrieveUserRequest>
         <msgs:userIdentifier>USER_LOGIN_ID</msgs:userIdentifier>
         <msgs:orgName>ORGANIZATION_NAME</msgs:orgName>
         <msgs:filter>
            <ns:includeAccounts>1</ns:includeAccounts>
         </msgs:filter>
      </msgs:retrieveUserRequest>
   </soap:Body>
</soap:Envelope>

---

Response Analysis

The AccountId is located within the <ns1:account> block. Note that a single user may have multiple account blocks depending on their configuration.

Sample Response: retrieveUserResponse

XML

 

<soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope">
   <soapenv:Header>
      <udsTransactionID xmlns="http://ws.arcot.com/UDSTransaction/1.0">xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx</udsTransactionID>
   </soapenv:Header>
   <soapenv:Body>
      <ns3:retrieveUserResponse xmlns:ns3="http://ws.arcot.com/ArcotUserRegistrySvc/1.0/msgs">
         <ns3:return xsi:type="ns1:UserDetailsTypeEx" xmlns:ns1="http://ws.arcot.com/UserSchema/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <ns1:userId>
               <ns1:orgName>ORGANIZATION_NAME</ns1:orgName>
               <ns1:userName>USER_LOGIN_ID</ns1:userName>
               <ns1:userRefId>000</ns1:userRefId>
            </ns1:userId>
            <ns1:status>ACTIVE</ns1:status>
            <ns1:account>
               <ns1:accountType>RADIUS_ID</ns1:accountType>
               <ns1:accountID>USER@DOMAIN_OR_ID</ns1:accountID>
               <ns1:accountStatus>10</ns1:accountStatus>
               <ns1:dateCreated>2026-03-16T10:25:34.000+00:00</ns1:dateCreated>
            </ns1:account>
         </ns3:return>
      </ns3:retrieveUserResponse>
   </soapenv:Body>
</soapenv:Envelope>

---

Key Field Mapping

Element	Description
userIdentifier	The unique name used by the user to log in.
includeAccounts	Boolean filter; must be 1 to see the accountID field.
accountID	The specific identifier for the account type (e.g., UPN, RADIUS ID).
userRefId	The internal system reference ID for the user object.