CA Top Secret is the Multi-Factor Authentication resource IBMFAC(IRR.RFACTOR.) needed for PAM even if your not running MFA?

Document ID : KB000016100
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

CA Top Secret  is the Multi-Factor Authentication resource IBMFAC(IRR.RFACTOR.) needed for PAM even if your not running MFA?

 

Answer:

IBMFAC(IRR.RFACTOR) is not needed if not using AAM/MFA.
For CARSA or IBMRSA, SAF doesn’t issue FASTAUTH for IRR.RFACTOR.

Only when using CAPAM (and RADIUS) with AAM/MFA, the AAM STC ACID will require permission to IBMFAC(IRR.RFACTOR.MFADEF)
For example:   
TSS ADD(dept) IBMFAC(IRR.RFACTOR)
TSS PERMIT(AAMSTC) IBMFAC(IRR.RFACTOR.MFADEF.) ACCESS(UPDATE)