# Natural Apps using RACF - how to implement SSO using web service / SAML assertion

**URL:** <https://techcommunity.softwareag.com/t/natural-apps-using-racf-how-to-implement-sso-using-web-service-saml-assertion/171509>\
**Category:** Forum\
**Tags:** Adabas-Natural, Natural, Natural-on-Mainframes\
**Created:** [June 18, 2013, 6:32pm UTC](https://techcommunity.softwareag.com/t/natural-apps-using-racf-how-to-implement-sso-using-web-service-saml-assertion/171509 "2013-06-18T18:32:25Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Doug\_Nguyen](https://avatars.discourse-cdn.com/v4/letter/d/5daacb/32.png) [@Doug\_Nguyen](https://techcommunity.softwareag.com/u/Doug_Nguyen)\
**Post date:** [June 18, 2013, 6:32pm UTC](https://techcommunity.softwareag.com/t/natural-apps-using-racf-how-to-implement-sso-using-web-service-saml-assertion/171509/1 "2013-06-18T18:32:25Z")

</div>

First, I am new here and know next to nothing abt Natural, Natural Security and Natural SAF.  
I work in Identity and Access Management mostly Java/Web.

Problem I want to pursue is: I have customer with application in Natural on mainframe and it uses RACF for security. Want to know options for single sign on into this application where the user web session is already authenticated prior to accessing this application. When accessing this application, can it go to a different login page where it would pick up the login token (in the header or as part of url parameter) and assert the identity with a web service call (SAML). If the identity is valid, logon session is created and able to login without being challenged for userid/password again.

How can one implement this? What setting in Nature Security is needed and programming option?

Thanks in advanced.

Regards,  
Doug

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/techcommunity/original/3X/c/d/cd19967bb605d28a72d77eb83a1cae22f3df2eb8.svg) [@system](https://techcommunity.softwareag.com/u/system)\
**Post date:** [June 19, 2013, 12:45am UTC](https://techcommunity.softwareag.com/t/natural-apps-using-racf-how-to-implement-sso-using-web-service-saml-assertion/171509/2 "2013-06-19T00:45:11Z")

</div>

What is the client / terminal emulation used to access the Natural application ?

---

<div class="post-metadata">

**Author:** ![Doug\_Nguyen](https://avatars.discourse-cdn.com/v4/letter/d/5daacb/32.png) [@Doug\_Nguyen](https://techcommunity.softwareag.com/u/Doug_Nguyen)\
**Post date:** [June 19, 2013, 2:33am UTC](https://techcommunity.softwareag.com/t/natural-apps-using-racf-how-to-implement-sso-using-web-service-saml-assertion/171509/3 "2013-06-19T02:33:01Z")

</div>

Hi Wolfgang

The client is a web browser. Terminal emulation is 3270? My understanding that web access is screen scrape and feed into terminal mode.

Look forward to your reply.

Regards,  
Doug

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/techcommunity/original/3X/c/d/cd19967bb605d28a72d77eb83a1cae22f3df2eb8.svg) [@system](https://techcommunity.softwareag.com/u/system)\
**Post date:** [April 2, 2021, 3:28pm UTC](https://techcommunity.softwareag.com/t/natural-apps-using-racf-how-to-implement-sso-using-web-service-saml-assertion/171509/4 "2021-04-02T15:28:58Z")

</div>