The system authorization facility (SAF) and the SAF router are present on all MVS™ systems, even if RACF® is not installed. Although the SAF router is not part of RACF, many system components and programs invoke RACF through the RACROUTE macro and SAF. Therefore, installations can modify RACF parameter lists and do customized security processing within the SAF router.

Information on the SAF router exits (ICHRTX00 and ICHRTX01) can be found in z/OS Security Server RACROUTE Macro Reference. Information on the SAF callable services router exit (IRRSXT00) can be found in z/OS Security Server RACF Callable Services.