How to configure basic authentication from CICS

To use basic authentication to authenticate your CICS application, you must.

• Pass the user's credentials from CICS to the z/OS Connect server by using either:
  • Parameters on the Host API BAQINIT call from the CICS application.
  • The CICS XWBAUTH user exit.
• If also using the CICS XWBAUTH user exit, customize the supplied URIMAP BAQHZCON with the following specifications,
  • USAGE(CLIENT) because CICS is the HTTP client.
  • AUTHENTICATE(BASIC) to indicate that the user ID and password credentials are to be provided by the XWBAUTH global user exit.

To send the user credentials from the CICS application to the z/OS Connect server as parameters on the Host API BAQINIT call use the BAQ-ZCON-PARAMETERS structure in the supplied BAQHAREC COBOL copybook. For each parameter to be passed, create an instance of the BAQ-ZCON-PARMS structure and set the BAQ-ZCON-PARM-NAME, BAQ-ZCON-PARM-ADDRESS and BAQ-ZCON-PARM-LENGTH values. For example,

       WORKING-STORAGE SECTION. 
      * API requester Host API required copybooks
       COPY BAQHAREC.
       COPY BAQHCONC.
     ...
      * User credentials for basic authentication
       01 MY-USER PIC X(10) VALUE 'myUsername'. 
       01 MY-PSWD PIC X(10) VALUE 'myPassword'.
       PROCEDURE DIVISION.
     ...
      * Set user credentials
           MOVE BAQZ-SERVER-USERNAME 
             TO BAQ-ZCON-PARM-NAME OF BAQ-ZCON-PARMS(1) 
           SET BAQ-ZCON-PARM-ADDRESS OF BAQ-ZCON-PARMS(1) 
             TO ADDRESS OF MY-USER 
           MOVE LENGTH OF MY-USER 
             TO BAQ-ZCON-PARM-LENGTH OF BAQ-ZCON-PARMS(1) 
           MOVE BAQZ-SERVER-PASSWORD 
             TO BAQ-ZCON-PARM-NAME OF BAQ-ZCON-PARMS(2) 
           SET BAQ-ZCON-PARM-ADDRESS OF BAQ-ZCON-PARMS(2) 
             TO ADDRESS OF MY-PSWD 
           MOVE LENGTH OF MY-PSWD 
             TO BAQ-ZCON-PARM-LENGTH OF BAQ-ZCON-PARMS(2). 
      * Make the BAQINIT call
...