IdF Advanced Adapter for ACF-2 provides a native interface between your application or identity infrastructure and ACF2 installed on a z/OS mainframe. The adapter functions as a trusted virtual administrator on the target system, performing tasks, such as creating login IDs and changing passwords. In addition, it automates some of the functions that administrators usually perform manually. The adapter enables provisioning and reconciliation with ACF2. The IdF adapter enables you to use ACF2 either as a managed (target) resource or as an authoritative (trusted) source of user information for your application or identity infrastructure.

Advanced Adapter for ACF2

The IdF Advanced Adapter for ACF2 is comprised of the Pioneer provisioning agent and the Voyager reconciliation agent. Both components in conjunction with the IdF Gateway enables the Advanced Adapter for ACF2 the ability to provide for bi-directional support for transformation of native ACF2 commands to LDAP and LDAP commands to ACF2.

The Pioneer (provisioning) agent receives identity and authorization change events, effectuating requested changes upon the target system. The Pioneer agent is a mainframe component that executes native requests that are sent from your application or identity infrastructure.

The Voyager (reconciliation) agent sends real-time notification events of user profile changes to the identity application from the target host system. The agent detects events such as user addition and deletion and changes in status, attribute, group membership and/or password.

The IdF Adapter for ACF2 enables an identity infrastructure to support and manage your policy, profiles, identity events and other resources on your mainframe. This tool reduces administration time, increases operational efficiency and reduces security risk. It is very important to note that the IdF mainframe solution provides the mechanism to retrieve critical data required that would meet corporate and regulatory polices.