RACF mapping problem during identity propagation

A RACF® mapping problem and message ICH408I occurred during identity propagation.

Symptom

The following message appears in the IBM® z/OS® system log:

ICH408I USER userid GROUP group NAME userid owner DISTRIBUTED IDENTITY IS NOT DEFINED: distinguished_name realm_name

Probable cause

RACF does not contain a mapping that associates the distinguished name of the user with a RACF user ID.

Action

If the user is permitted to access the CICS® resources, create a RACF mapping that includes the distinguished name of this user. For more information see Configuring RACF for identity propagation.