End-User Verification (Conversation-Level Security)

End-user verification is used to enable the requested application subsystem to verify the identity of the requester before providing access to the requested transaction program and its resources. The security information exchanged can include a user ID and a password. The user IDs provided by conversation-level security can also be used for auditing and accounting purposes.

In conversation-level security, the requesting transaction program provides the security information on the ALLOCATE verb, and the remote application subsystem performs the verification. If the requesting transaction program has not supplied the correct user ID and password, the remote application subsystem rejects the request.

An intermediate transaction program (one started by another transaction program) that requires conversation-level security can be used to access an additional transaction program that requires conversation-level security. In this case, an already-verified indicator is set in the allocation request for the additional transaction program. The user ID saved from the first request, which initiated the intermediate transaction program, is automatically supplied in the second request.