IBM Security Access Manager for Enterprise Single Sign-On, Version 8.2.2

Tutorial: Creating logon AccessProfiles for Mainframe applications with HLLAPI support

Use the AccessProfile Generator for set logon profiles for Mainframe applications with HLLAPI support.

About this task

High Level Language Application Programming Interface (HLLAPI) is a standard to access existing information and applications that are housed on IBM® and Unisys Mainframes, AS/400, UNIX/VMS, and others.

Examples of applications that provide HLLAPI are Attachmate EXTRA, Reflection, and IBM iSeries. Terminal Emulators are typically used to connect to these existing applications.

Procedure

  1. Open AccessStudio (Start > All Programs > ISAM ESSO AccessStudio > AccessStudio).
  2. Start the AccessProfile Generator by clicking the New icon and selecting New AccessProfile (using Generator).
  3. Click Next from the Welcome window.
  4. Open the application logon screen that requires an AccessProfile.
  5. Click Next.
  6. Enter a unique name for the application and select Mainframe application with HLLAPI support as the application type.
  7. Click Next.
  8. In the Select Task to Automate screen, Logon is the only available option.
  9. Click Next.
  10. Provide the necessary HLLAPI information.

    All installations of Terminal Emulators must have the following settings.

    The configuration varies for each application. See the documentation of the specific application for configuration information.

    Option Description
    DLL filename Enter the Dynamic Linked Library for HLLAPI functionality that is provided by the Terminal Emulator Application, or click Browse to navigate to the .DLL file stored on the computer.
    Short Name Select a unique name to identify a host session. Select a letter from A to Z. This field is mandatory.
    Long Name Select an alternate name to identify a host session, up to eight characters.
  11. In the Identify Screen for Logon window, enter a unique name for the screen.
  12. Based on your selected task, capture identification information for the fields on the application screen.
    Note: The fields available for each automated task varies.
    1. Click the Finder tool from the AccessProfile Generator, then drag the icon on the matching field in the application screen or web page.
    2. As you drag the Finder tool to the application, AccessProfile Generator marks the field or button that can be captured.
    3. When the Finder tool is positioned over the field, release the mouse button. If the field was captured successfully, the Clear signature option is activated.
    4. The screen title field retrieves its default screen name from the application. Click Clear signature to undo the capture.
    5. Click Advanced settings to perform the task only when a certain condition is satisfied.

      For more information, see Creating AccessProfiles that perform automation tasks or Setting advanced options.

  13. After you capture all the application fields, click Next.
  14. In the Identify Screen for Logon window, provide case-sensitive text strings that can accurately identify the screen. Click Add.
  15. Click Next.
  16. Select each action to include for logging on in the Available actions group and moving it to the Selected actions group.
    Important: The actions must follow the correct sequence for the logon process.
    1. Select actions from the Available actions pane.
    2. Click the Add button.
    3. Use the Move Up and the Move Down icons to arrange the sequence of actions in the Selected actions pane.
  17. Specify whether you want AccessStudio to identify the successful completion of the logon task.
    • The options are No, continue without identifying successful logon, and Yes, find the screen that appears upon successful logon.
    • If you selected Yes, find the screen that displays, key in one or more case-sensitive text strings that appear on the screen after successful logon. Then, click Add.
  18. Click Next.
  19. Select or create an authentication service.

    If there was no previously created authentication service, leave the default selection at Create one for me automatically.

  20. Click Finish to return to the AccessStudio user interface.
    Important: Test all the AccessProfiles before you upload it to the IMS Server. For more information, see .
  21. Upload the AccessProfile to the IMS Server to activate it.
    1. In the Data type pane, right-click on the AccessProfile.
    2. Select Upload to IMS.
    3. Click Yes when the IMS Upload Confirmation displays.
    Another message box displays, indicating the success or failure of the upload.

Feedback