Symantec VIP Email notification regarding activities performed by administrators.
Article ID: 436886
Updated On:
Products
Issue/Introduction
VIP End Users are not receiving email notifications when administrators make changes to their account in VIP Manager despite having policy turned on.
VIP End Users are receiving email notifications when they perform their own credential changes through MyVIP portal though.
Cause
The difference between these two scenarios (user logs into MyVIP Portal vs. Administrator logging into VIP Manager Portal) is that the SAML request going through MyVIP portal is pulling the email attribute of the user authentication. But that SAML request will not include the end user email for VIP Administrator logging into VIP Manager portal.
- End User authenticating to MyVIP Portal - This retains the end user email address from the SAML logon and can utilize this when that user makes any changes to their own credential (Credential Email Notification policy)
- Note for 'Email notification on credential action': For SAML, configure your IdP to include the email attribute as an out-of-band attribute in the signed SAML assertion to VIP Login.
- VIP Administrator authenticating to VIP Manager - This is the administrator SAML request and then passes the administrator to our VIP Manager portal. This authentication uses SAML for the administrator only and does not pull the email address of the end user
- Note for 'Email notification on administrator action': You must select the administrator actions for which VP sends the email notification as well as the user attribute that VIP uses to populate the user email address.
Resolution
For the "Email notification on administrator action" to send to the end user email, VIP Manager already needs the email address populated in their "User" account.
- This email address can manually be added to User Accounts within VIP Manager under the 'Users' tab
- The 'email attribute' to the end user account can automatically by added through LDAP Synchronization. Follow the documentation instructions to add a "VIP User Attribute" in the local VIP Enterprise Gateway User Store configuration found here (pages 61-62): https://techdocs.broadcom.com/content/dam/broadcom/techdocs/us/en/dita/symantec-security-software/identity-security-authentication/vip/generated-pdfs/VIPEG911_2InstallAndConfig.pdf
Additional Information
Customizable end-user notifications for administrator actions was added in maintenance for Symantec VIP Authentication Services 2026.March.01
Feedback
