Additional RACF administration steps for Yubico OTP

You must perform additional RACF® administration steps for Yubico OTP.

Define a resource profile in MFADEF class
You define Yubico OTP factors by creating a general resource profile for the factor name in the MFADEF class. To define a factor for Yubico OTP, use RDEFINE to create a resource profile named FACTOR.AZFYUBI1 in the MFADEF class.
Define a resource profile in FACILITY class
Use RDEFINE to define a resource profile in the FACILITY class for authorizing administrators who execute Yubico OTP panels. The user ID of the IBM® MFA web services started task requires READ access to this profile.
Authorize access to IRR.RFACTOR.MFADEF.AZFYUBI1 profile
Authorize the administrators who execute the panels to the IRR.RFACTOR.MFADEF.AZFYUBI1 profile. The user ID of the IBM MFA web services started task requires READ access to this profile.

Parent topic: Configuring Yubico OTP

Next topic: Additional system programming steps for Yubico OTP