--- ZOS101 News & Navigation Control Panel ----

 ZOS101 and System Z Jobs Board!

What is SAF? - IBM
System authorization facility or SAF is an interface defined by MVS that enables programs to use system authorization services to control access to resources, such as data sets and MVS commands. SAF either processes security authorization requests directly or works with RACF, or other security product, to process them.

SAF Authentication for the REST API and MQ Console on z/OS
The equivalent function on z/OS is the ability to use the System authorization facility (SAF) interface for authentication and authorization. This allows the MQ Console and REST API to use user names and passwords in the RACF database to authenticate users, and grant access to roles based on the access that users and groups have to RACF profiles.

z/OS System Authorization Facility authorization - IBM
When you select SAF authorization, WebSphere® Application Server uses the authorization policy that is stored in the z/OS® security product for authorization. If a Lightweight Access Directory Protocol (LDAP) registry or Custom registry is configured and SAF authorization is specified, a mapping to a z/OS principal is required at each login for any protected methods to run:

IBM Education Assistance for z/OS V2R1
Filename: zOS V2R1 JES2 Eight Char Job Class and SAF Controls Usage & Invocation: SAF Controls on Input Class Use JES2 now supports verifying a jobs access to a job class –This eliminates a number of customer exits to do similar check The check verifies READ access to a entity name in the JESJOBS class JOBCLASS.nodename.jobclass.jobname

Certificates Stored in SAF | Tectia® Server 6.4 for IBM z/OS
server-zos-user. Tectia® Server 6.4 for IBM z/OS ... Certificates Stored in SAF. Certificates Stored in SAF. To use SAF certificates for user authentication, do the following steps. Replace the names and IDs with those appropriate to your system: To create a user key in SAF, give the following TSO commands:

z/OS Server - client SAF certificate logon - SSH Answers
z/OS Server - client SAF certificate logon. 0 We have been implementing Express Logon Feature (ELF) for TSO (and other APPL) access via TN3270. This uses user certificates on smart cards / badges and RACF (SAF) PassTickets to log into TSO without userid or passwords. ... zos logon saf certificate client. asked Aug 17 '15 at 23:45.

Trace SAF Requests with MLS - techdocs.broadcom.com
SAF is a z/OS component that permits resource managers of the operating system to request security services. SAF's primary function is to route security information between the application and the security product that resides with the z/OS software. Any program using SAF automatically interfaces with CA ACF2 because CA ACF2 translates SAF ...

IBM System Authorization Facility (SAF)
The IBM System Authorization Facility (SAF) provides an interface that can direct control to all external security products, including CA ACF2. The key component that SAF uses is the z/OS router. CA ACF2 relies on the CA SAF interface, which makes extensive use of the z/OS router. These developments make CA ACF2 compliant with IBM SAF.

Using a JWT with z/OS Connect EE - Mainframe DEV
The use of SAF (System Access Facility) for authorization is configured using the element in server.xml. We enable the authorization and audit interceptors in order to control access to the catalog system API and audit requests.

Certificates Stored in SAF | SSH Tectia Server 6.1 for IBM ...
Certificates Stored in SAF. ... PkiEkProvider "zos-saf:KEYS(ID(SSHD2) RING(SSH-PKI))" MapFile cert-user-mapping.txt (SSH Tectia validation) If SSH Tectia validation is used, define also the LDAP server(s) used for CRL checks in the ssh_certd_config file. If the CA services (OCSP, CRLs) are located behind a firewall, define also the SOCKS server.

  FIRE101 Jobs: 

  POLICE101 Jobs:

  Mainframe IT Jobs:

  Software Jobs:

  Finance Jobs:

  Legal, Lawyer Jobs:

  Medical, Nurse Jobs:

  Genetic, Science Jobs