Natural SAF Security

The architecture of Natural SAF Security comprises several key components designed to integrate Natural applications with z/OS SAF-compliant security products. The primary components include the SAF Interface, the Security Policy Enforcement Module, and the Audit Logging Facility. The SAF Interface acts as the communication layer, translating Natural application requests into SAF calls and interacting with the chosen security product (RACF, CA ACF2, or CA Top Secret).

The Security Policy Enforcement Module resides within the Natural runtime environment and intercepts access requests, enforcing security policies defined in the SAF product. The Audit Logging Facility captures security-related events, such as successful and failed access attempts, and writes them to the system log or a designated audit trail. Communication between these components is facilitated through z/OS system calls and SAF interfaces.

Data storage relies on the underlying SAF product's database for storing security profiles and user information. Network requirements are minimal, as communication occurs within the z/OS environment. The solution supports RBAC, allowing for role-based permissions management.

Encryption is handled by the SAF product, ensuring data protection.