Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

3 Not supported for the current status
Status Future consideration
Workspace z/OS
Categories RACF
Created by Guest
Created on Jul 14, 2025
Merged idea
This idea has been merged into another idea. To comment or vote on this idea, please visit ZOS-I-2004 Support for RACF federation with external IdP (using JWTs for authentication).

Please provide full out-of-the box support for AD & Azure Entra integration with full availability decoupling Merged

As per of full out-out-of-box RACF integration to AD & Azure Entra, we need all capabilities to be supported including

  • AD user ID and passwords logins mapped to RACF accounts & passwords for availability decoupling (along will full lifecycle periodic sync of accounts)

  • AD Service accounts & generic accounts mapped to RACF service accounts & generic accounts availability decoupling

  • AD groups and group nesting (important feature along will full lifecycle periodic sync of groups)

  • Short lived JWT/JWE tokens for APIs with various subjects mapped to mainframe data sources / DB fields (IMS / DB2)

  • SSO login with OS user login (for TN3270 thick client) / Browser (TN3270 web client)

  • Obviously with password-less & MFA login with authenticator TOTP support natively (without additional add-ons)

Idea priority High