Skip to main content

Products  >   Servers  >   Mainframe Servers  >   z/OS

System Authorization Facility

System Authorization Facility (SAF)

SAF is part of the operating system. If you use SAF with RACF, you can enhance and complement your overall system security functions. SAF conditionally directs control to RACF, if RACF is present, or to a user-supplied processing routine, or both, when it gets a request from a resource manager.

[ RACF profile checking ]

The key element in SAF is the SAF router, which is always available to you. It is a system service that gives you a common focal point for all products that provide resource control. With a common focal point, it's easier for you to use common control functions shared across products and across systems.

The components and subsystems that manage your resources call the MVS router as part of some of their decision making functions, such as access control checking and authorization checking. These functions are called control points.

To learn more about SAF and how it works with RACF, you can look in:

  • OS/390 SecureWay Security Server RACROUTE Macro Reference in BookManager or PDF format
  • OS/390 SecureWay Security Server RACF Callable Services in BookManager or PDF format

Click here for information about downloading and browsing PDF files.



This page was last updated February 2001.