IBM Z Software
This portal is to open public enhancement requests against IBM Z Software products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).
Shape the future of IBM!
We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:
Search existing ideas
Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,
Post your ideas
Post an idea.
Get feedback from the IBM team and other customers to refine your idea.
Follow the idea through the IBM Ideas process.
Specific links you will want to bookmark for future use
Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.
IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.
ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.
Due to processing by IBM, this request was reassigned to have the following updated attributes:
Brand - Servers and Systems Software
Product family - Transaction Processing
Product - CICS Transaction Server
For recording keeping, the previous attributes were:
Brand - WebSphere
Product family - Transaction Processing
Product - CICS Transaction Server
The Feature Pack functionality has been integrated into CICS. The requirement is satisfied by CICS TS 5.2 which is generally available from June 13th 2014.
The Feature Pack functionality has been integrated into CICS. The requirement is satisfied by CICS TS 5.2 which was announced 7th April 2014 with a planned general availability date of June 13th 2014. For more information see the IBM CICS Transaction Server for z/OS, V5.2 announcement letter
http://www.ibm.com/common/ssi/cgi-bin/ssialias?infotype=an&subtype=ca&supplier=897&letternum=ENUS214-107
The Feature Pack functionality has been integrated into CICS. The requirement is satisfied by CICS TS 5.2 which was announced 7th April 2014 with a planned general availability date of June 13th 2014. For more information see the IBM CICS Tools for z/OS, V5.2 announcement letter
http://www.ibm.com/common/ssi/cgi-bin/ssialias?infotype=an&subtype=ca&supplier=897&letternum=ENUS214-107
This functionality is available via the CICS TS Feature Pack for Security Token Extensions V1.0 which was announced 8th October 2013 and is available from October 11th 2013.
For more details see http://www-01.ibm.com/common/ssi/cgi-bin/ssialias?infotype=an&subtype=ca&supplier=897&letternum=ENUS213-461
Comment added on behalf of HSBC (mark1_roberts@hsbc.ca).
"We agree. SAML is the industry standard for conveying user identity, authentication and entitlements information in SOAP messaging.
We would rather see CICS provide support for SAML rather than forcing us to use an STS which will induce latency and that is a big concern for high volume applications.
We require the following:
For inbound requests:
Validate the assertion by decrypting with the required public key and then comparing the decrypted token with control information sent through a custom header (e.g. ensure the SAML was created for the same user as the rest of the message tells us it was)
Extract the contents of the SAML into a Container
Allow an inbound assertion to be extended, re-hashed (into a new token), encrypt the token using the CICS region's private key (which may be unique or shared by other CICS)
For outbound requests:
Create a SAML assertion - Container supplied content; hash a token (supplied separately via the API); encrypt the token using the private key of the CICS
Insert a SAML assertion (when required) into a SOAP message for subsequent delivery to the service provider"
This is a candidate for inclusion in a future release.