RACF® database templates for IBM MFA

The MFA segment is added to the GENERAL profile and the MFA fields are added to the base segment of the USER profile.

The USER template:

The GENERAL template:

Table 2. The GENERAL template, MFA segment and MFPOLICY segment
Field name (character data) Field ID Flag 1 Flag 2 Field length decimal Default value Type Field being described
MFA 001 00 00 00000000 00   Start of segment fields
MFDATA 002 00 00 00000000 00   Free-form factor metadata
MFPOLICY 001 00 00 00000000 00   Start of segment fields
MFFCTRN 002 10 00 00000004 00   Number of factors in policy
MFFCTRS 003 80 00 00000000 00   Policy factor list
MFTIMEO 004 00 00 00000004 00   Policy token timeout
MFREUSE 005 00 00 00000001 00   Policy reuse setting