Feature

Function

Access & Authentication Services for IBM RACF

The IdF Advanced Adapter allows for standard LDAP authentication to RACF allowing for pass through authentication and authorization between RACF and distributed systems.  The Advanced Adapter also provides for the reactivation of locked out host accounts.

Delegate Authentication Services

Delegate internal authentication services to external data sources for customized authentication services and/or allowing you to centralize or de-centralize your administration.

Password Management

The IdFAdvanced Adapter provides bi-directional synchronization of passwords between source and target identity repositories, whether the source and/or target system is a directory, database, application, resource or RACF.

Reconciliation Services

Reconcile identity credentials against the source and target system. All native RACF changes are able to be queried via LDAP or via the Identity Management system.

Provisioning of Host based Systems

The IdF Advance adapter allows for provisioning of RACF and z/OS resources including establishment of user catalogs for new mainframe users.

Mainframe Security Policy Integration

The IdF Advanced Adapter provides the ability to push native security changes and polices from RACF and z/OS mainframe to distributed systems. Additionally, the IdF Advance Adapter allows for the setting of password policies on the host system.

Fine Grain Access Control

Provide Access Control List and/or extend current enterprises identity management systems rule-based and role based access controls.  In addition you can assign or un-assign RACF users access to Datasets, Resource Profiles, and Access to TSO. 

 Security

IdF Advanced Adapter supports Secure Sockets Layer (SSL) and Transport Layer Security (TLS) standards using TCP/IP or IBM MQ Series. All data communication with host based systems is AES 128 Bit Encrypted.

IdF Advanced Adapter for RACF captures and sends them to the IdF Virtual Gateway to be stored and/or can be exported to another database or report writer.  This feature allows for real-time monitoring and the ability to integrate Mainframe and Distributed audit records to meet internal and external compliance.