Security in the ECI

The ECI uses conversation-level security based on the SNA LU 6.2 model.

ECI security involves:

Authentication
Checking that the user ID and password information associated with an ECI call is valid.
Authorization
Checking that the authenticated user is allowed access to the requested resource. This check is performed on the CICS® server.

The user application can set the user ID and password on an ECI request for a conversation with a specific CICS server. These values override any default values set for the server connection.