VIP does not honor the Credentials policy if the account policy is more restrictive (VIP Authentication Services 2019.May.1)
Last Updated May 16, 2019
If a credential type is allowed by the account policy but not allowed for a user group by the Credentials policy, VIP correctly honors the Credentials policy. A user in that group cannot register that credential type.
However, if a credential type is not allowed by the account policy but allowed for a user group by the Credentials policy, VIP does not honor the Credentials policy. A user in that group is unable to register that credential type, even though the Credentials policy allows it.
There is no workaround for this issue.
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe