Security

Security mechanisms include link, bind and user security on connections, SSL client authentication, SSL server authentication, and identity propagation.

Security considerations
CICS® Transaction Gateway can perform authentication and authorization checks at different points during the processing of requests.
CICS connection security
Different security options are available on the connection when CICS Transaction Gateway is used for connecting client applications to CICS; the available options are platform and protocol dependent.
Connection security and SSL
CICS Transaction Gateway can secure a network connection using SSL (Secure Sockets Layer).
User authentication using SSL client certificates
You can optionally use client certificates with SSL to allow the server to authenticate the client during the SSL handshake.
ECI calls secured with JSON Web Token (JWT)
CICS Transaction Gateway can perform authentication and authorization checks at different points during the processing of requests.
Identity propagation
CICS Transaction Gateway can pass user security identity information (a distributed identity) from a JEE client in IBM® WebSphere® Application Server across the network to CICS Transaction Server for IBM z/OS®. The security identity of the user is preserved for use during CICS authorization and for subsequent accountability and trace purposes.