SAF (System Authorization Facility)
The z/OS interface that routes security requests from components such as TSO, CICS and DB2 to the installed external security manager.
See it in context
Mainframe security engineering: SAF and the three security managers