Vanguard ez/Token

The architecture of Vanguard ez/Token is designed to provide a secure and scalable two-factor authentication (2FA) solution for z/OS systems. The main components include the ez/Token core, authentication modules, administrative interfaces, and a logging subsystem. The ez/Token core is the central component, responsible for processing authentication requests and managing the overall system.

Authentication modules support various authentication methods, such as hardware tokens, software-based authenticators, and other methods. The administrative interfaces, which can be accessed via TSO/ISPF or a web-based console, allow administrators to manage users, tokens, and policies. Communication between components occurs through security exits and APIs.

The product integrates with RACF through security exits, intercepting authentication requests and enforcing 2FA. Data storage utilizes z/OS datasets for configuration and user data. The product supports audit logging, which records authentication events and security-related activities.

The administrative interface allows for detailed configuration of parameters, including authentication methods, token types, and logging levels. The product supports RBAC with role-based permissions. Network requirements include access to the z/OS system and any external authentication servers.

Compared to other solutions, ez/Token offers a streamlined integration with RACF and a focus on ease of use.