DIGIPASS Plug-In for RACF

The architecture of the DIGIPASS Plug-In for RACF comprises several key components. The SAF (System Authorization Facility) interface acts as the primary integration point with RACF. The plug-in module intercepts authentication requests and interacts with the DIGIPASS authentication server.

The DIGIPASS server handles the authentication logic, including validating one-time passwords (OTPs) generated by DIGIPASS tokens. Communication between the plug-in and the DIGIPASS server occurs over TCP/IP, typically using ports 80 or 443. The plug-in uses the RACF database to store configuration parameters and user profiles.

The plug-in's configuration files store settings such as server addresses, security policies, and logging options. The plug-in supports various authentication methods, including OTPs. The plug-in uses encryption to secure communication between the plug-in and the authentication server.

The plug-in logs authentication events and errors for auditing purposes. The plug-in is written in Assembler and C. The plug-in's design ensures minimal impact on existing RACF operations.

The plug-in's architecture is designed for high availability and scalability.