KERBEROSUSER

The KERBEROSUSER system initialization parameter specifies the user ID that is associated with the Kerberos service principal for the CICS® region. This parameter is optional. Specify this parameter if you want the region to support the Kerberos service. If this parameter is not specified, the Kerberos service is disabled in the region.

KERBEROSUSER={kerberos_userid}: You can specify any valid user ID to be associated with the Kerberos service principal for the CICS region.

Recommendation: The user ID associated with the Kerberos service principal for the CICS region must not be a protected user ID. Because the CICS region user ID is protected to prevent revocation, do not use it for the Kerberos service principal.

For information about Kerberos support in CICS, see How it works: Kerberos.