Security messages to add to TPX SAMT when employing Multi-Factor Authentication (MFA) and Advanced Authentication Mainframe (AAM) Support

Products

• TPX - Session Management

Issue/Introduction

CA TPX uses the SAMT (Security Action Message Table) to determine the action to take upon receiving messages from security.

Environment

Release: NVINAM00200-5.4-TPX-Session Management-Access Management package
Component:

Resolution

Include the following messages for your security system in the SAMT when you implement MFA/AAM support for CA TPX:

 

CA Top Secret:

• TSS7057E Invalid SecurID passcode for CA RSA controlled user
• TSS7059E Unable to validate signon credentials: Password fallback enabled
• TSS7060E Unable to validate ___RSA passcode. Next_Token_Code Required
• TSS7061E Unable to validate ___RSA passcode. New_Pin Required
• TSS7062E Unable to validate signon credentials: ___RSA server is unavailable
• TSS7099E Signon credentials invalid

 CA ACF2:

• ACF01069   Various MFA failure messages
• ACF01070  INVALID LOGON
• ACF01071  INVALID LOGON
• ACF01072  INVALID LOGON
• ACF01073  MFA returned error: NEXT_CODE_REQUIRED
• ACF01074  MFA returned error: NEW_PIN_REQUIRED   

 

 

You will need to work with your security administrator to determine what action you want TPX to take when receiving these messages and define that within the SAMT.

Additional Information

TPX 5.4 - New Features and Enhancements: Multi-Factor Authentication (MFA) and Advanced Authentication Mainframe (AAM) Support