Configuring identity propagation
You must configure RACF to be able to map distributed identities. You can configure your CICS system to accept distributed identity information from IPIC connections or from web service requests. Your CICS Liberty server can also use distributed identity mapping.
If you are using MRO connections, you can accept distributed identity information between CICS systems only. You must ensure that ATTACHSEC(IDENTIFY) is specified, but no other configuration changes are required.