EXEC CICS VERIFY PASSWORD Enhancement

Hi Hursley I was handling the case, and thought more details might help with this IDEA.

TS011500929 was the originating case and a explanation why they are requesting this enhancement.

"Right now, I may not be able to move forward with MFA anticipating users feedback with too many DUO alerts when accessing their data. I am hoping ideasibm staff can help in our finding controlling MFA at the transaction level.

We are trying to implement Multi Factor Authentication(MFA) in our CICS TS56 environment.

Our application home grown signon screen was successful with the implementation of MFA at the signon level of CICS using EXEC CICS SIGNON command.

Because of government restrictions our BMS maps data fields contain the userid and password along with the application data fields. Each time users enter data the userid and password is required for verifying user password prior accessing DB2 database. We accomplish this by using EXEC VERIFY PASSWORD command coded in a subroutine which application call too for validation. Our users would be overwhelmed with too many DUO alerts each time a user wants to access the database.

We would like to enhance as an option PASSCHK=NOMFA to EXEC CICS VERIFY PASSWORD command to bypass DUO alerts when not required for secondary authentication. Enhancing this will not overwhelm users responding to DUO phone alerts, and allow the developer to dictate secondary authentication to the application business logic."

Regards,

Tino Tropea