z/OS Security › TCP/IP Security › CICS › Surrogate User Checking

Surrogate User Checking

CICS performs surrogate user security checking using the surrogate user facility of an external security manager (ESM) such as RACF. A surrogate user is one who has the authority to start work on behalf of another user and is authorized to act for that user without knowing that other user's password. Surrogate user checking of the following CICS resources is important for TCP/IP CA Gen servers:

• The CICS default user
• PLT post-initialization processing
• Started the transactions