Using sample connection and sign-on exit routines for CICS transactions

For a CICS® transaction to use the sample connection or sign-on exit routines, the external security system, such as RACF®, must be defined to CICS.

About this task

Define an external security system, such as RACF, to CICS with the following specifications:
  • The CICS system initialization table must specify external security.
    • For CICS Version 4 or later, specify SEC=YES.
    • For earlier releases of CICS, specify EXTSEC=YES.
    If you are using the CICS multiple region option (MRO), you must specify SEC=YES or EXTSEC=YES for every CICS system that is connected by interregion communication (IRC).
  • If your version of CICS uses a sign-on table (SNT), the CICS sign-on table must specify EXTSEC=YES for each signed on user that uses the sign-on exit.
  • When the user signs on to a CICS terminal-owning region, the terminal-owning region must propagate the authorization ID to the CICS application-owning region.

You must change the sample sign-on exit routine (DSN3SSGN) before using it if the following conditions are all true:

  • You have the RACF list-of-groups option active.
  • You have transactions whose initial primary authorization ID is not defined to RACF.