With MFA/AAM Multi Factor Authentication. What is IBMFAC(IRR.RFACTOR.USER) used for?

Document ID : KB000015799
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

With MFA/AAM Multi Factor Authentication.
What is IBMFAC(IRR.RFACTOR.USER) used for?

Answer:

Permission required for user - IBMFAC(IRR.RFACTOR.USER)
This permission (driven out of SAF) is required for R_Factor Getuser events, which occur for factors: IBMRSA, CAPAM (and soon, Radius), but not for CARSA. The R_Factor Getuser is used to extract the MFA segment data for the MFA driven.