With MFA/AAM Multi Factor Authentication. What is IBMFAC(IRR.RFACTOR.USER) used for

Products

• Top Secret

Issue/Introduction

With MFA/AAM Multi Factor Authentication.
What is IBMFAC(IRR.RFACTOR.USER) used for?

Environment

Release:
Component: TSSMVS

Resolution

Permission required for user - IBMFAC(IRR.RFACTOR.USER)
This permission (driven out of SAF) is required for R_Factor Getuser events, which occur for factors: IBMRSA, CAPAM (and soon, Radius), but not for CARSA. The R_Factor Getuser is used to extract the MFA segment data for the MFA driven.