SAF defines a service that z/OS® applications can use to retrieve the SAF user ID corresponding to a specified user credential from another registry. A default implementation or installation-provided "plug-in" routines to this service provide the credential mapping logic, which can be unique to specific applications or security products.