Resource Initialization Manager › CA LMP › System Authorization Facility Support

System Authorization Facility Support

CAISSF requires no coding or customization when using a CA security product.

For other security products that support system authorization facility (SAF) (for example, RACF), CAISSF provides a user‑modifiable exit, CAS9SAFC. The exit is called if CA ACF2 or CA Top Secret is not installed and if SAF support is active, as determined by the presence of a valid address in the CVTSAF field of the CVT.

A pre-built exit, CAW0LOAD(CAS9SAFC), is installed with the CAIRIM service to support security calls from STC, TSO or batch tasks. The library in which the exit resides must be APF-authorized. The authorization is required to comply with SAF restrictions for signin and resource checking.

If you need to customize the exit, the source code is in the CAW0SRC(CAS9SAFC) member.

Note: If you use a security product that is not from CA, you must evaluate whether it can handle the anticipated volume of security processing, especially if you customize the CAS9SAFC exit.