A proxy user enables connectivity to subsystems and can submit jobs on behalf of a logged-in user. Proxy users must be configured as certificate-based service users, meaning they do not require a password and are authenticated through certificates.
Before you begin
- A logged-in user must have 'READ' access to an IBM® System Authentication Facility (SAF) profile where the UMS is running to use a proxy user.
- You can define a SAF check if a user is authorized to use the certificate credential specified in the proxy user by setting the
components.izp.security.checkProxyUserAccess parameter to true. For more information, refer to Parameters in ZWEYAML.
Procedure
To create a proxy user, complete the following steps:
-
Click the navigation menu and select .
-
Click Register proxy user.
-
On the Register proxy user page, provide the required field values:
- Name
- Specify a unique name for the proxy user.
Note: Uppercase alphanumeric characters (A-Z, 0-9), and characters @, #, and $ are allowed. The name must begin with an alphabet character. Maximum size is 32 bytes.
- Keyring owner
-
Specify the user ID of the owner of the key ring.
Note: Uppercase alphanumeric characters (A-Z, 0-9), and characters @, #, and $ are allowed. The name must begin with an alphabet character.
- Keyring name
- Specify the name of the key ring.
Note: Alphanumeric characters (A-Z, a-z, 0-9) are allowed.
- Certificate label
- Specify the label of the certificate connected to the key ring.
Note: Alphanumeric characters (A-Z, a-z, 0-9) and underscores (_) are allowed.
- Keystore type
- Specify the keystore type of the key ring. The supported keystore types are:
- (Software) JCERACFKS
- (Hardware) JCECCARACFKS
-
Click Register.
Results
A proxy user is created successfully and will appear in the Default proxy user drop-down list of the Creating teams page.