New Function (NF) APARs PK95579, PM01622, PK83741, and PK98426 add support for distributed identity propagation to CICS Transaction Server for z/OS (CICS TS) V4.1. If you are using z/OS V1.11 or later, this allows security identities operating in the distributed environment to be associated with security identities used on the server (z/OS user IDs).
APARs PK95579, PM01622, PK83741, and PK98426 enable CICS applications to participate in end-to-end security solutions, and therefore benefit from improved cross-platform accountability and auditing, and provides an alternative to custom written identity mapping.
To use the new function, you must be running on z/OS V1.11 or later and use a compatible client to provide a distributed identity. Perform an initial start after applying the PTFs for these APARs:
- PK95579 and PM01622 supply updates to the CICS Security domain to call new RACF functions for identity propagation support and updates to Security domain callers (Web services, IPIC, and MRO) to call the new functions for identity propagation support.
- PK83741 enables identity propagation support if z/OS 1.11 is present.
- PK98426 enables CICSPlex SM updates for identity propagation.
See New Function APARs for CICS Products to find all NF APARs for CICS TS or any CICS product.
CICS/TS CICS TS CICS Transaction Server