Establishing Signon Processing › Considerations and Examples

Considerations and Examples

Keep in mind the following:

• The password in the User definition is not referenced when the external security system controls signon authorization. However, if external signon fails and CA Ideal security facilities are used, the password is required.
• The security ID must be defined as either a CA Ideal Person Name or alias for a Person Name. The signon-process is more efficient when the SECURITY-ID is defined as a Person Name rather than an alias for the Person Name.
• It is not necessary to define CA Ideal users to an external security system if you are not using one to control access to CA Ideal.
• When you define CA Ideal users to the external security systems, define them with the same name as the Person Name of the CA Ideal User Definition.
• If you do not use an external security to control access to CA Ideal, UIDCHK should equal YES.
• When UIDCHK has a value of NO and no default user (DFLTUSR) is specified, you must define the security ID or the TP monitor ID in the dictionary as a Person Name or an alias for a Person Name to retrieve a User Definition for CA Ideal authorizations.
• For greatest efficiency, define the security ID as an alias when UIDCHK has a value of NO, and as the Person Name when UIDCHK has a value of YES.
• If you specify a default user when UIDCHK has a value of YES, the default user Person Name or User ID does not have to match the signon-ID (operator ID, terminal ID, or security ID), but any non-default user IDs are checked.
• If a user signs on under an alias or with a default user ID, the functions $USER-NAME and $USER-ID return the CA Ideal person name and user ID associated with the alias or default user ID. In addition, that same person name and user ID are placed in the Created by, Last Modified by, and Compiled by fields for any entities created, modified, or compiled by that user.

The SC00OPTS SECRTY parameter affects signon processing as follows:

Signon-ID source

If SC00OPTS SECRTY=Y, then Signon-ID source is the Security ID. If SC00OPTS SECRTY=N, then Signon-ID source is the TP Monitor ID CICS: TCTTEOI (OPERID).

SECRPFX= (IDOPTS)

Secures individual access to different regions.

UIDCHK= (IDOPTS)

If SC00OPTS SECRTY=Y, then UIDCHK assumes a value of NO: Aliases allowed.

If SC00OPTS SECRTY=N, then if UIDCHK is YES: the CA Ideal person name and user ID are valid only. If UIDCHK is NO: then aliases are allowed.

DFLTUSR= (IDOPTS)

Specify a default CA Ideal user ID to assign when the signon ID is not defined.

DFLTUSR= (SC00TRAN)

Specify a default CA Ideal user ID for a particular transaction to assign when the signon ID is not defined. It overrides the DFLTUSR defined in IDOPTS, if one exists.

SET CHECK DUPLICATE USER

Enables or disables the check for duplicate signon IDs. Replaces old session with new session when duplicate monitor ID is found.