Most mainframe users are familiar with session management software. It's almost the default way to access IBM Z applications - and if you use it, you probably don't even give it a second thought. This post explores how the humble mainframe session manager is evolving, making home and hybrid working easier and even opening up mainframe modernization opportunities.
If your organization does use a session manager, you'll know that when you sign-in that it lets you access all the mainframe applications you're authorized to use without having to waste time and effort logging into (and out of) each one individually. You can quickly and easily switch between applications throughout your day and cut and paste information from one application to another.
In addition to enhancing end-user productivity in this way, session managers play an important role in assisting IT teams in managing and monitoring application access permissions for individual users, ensuring compliance with enterprise security and confidentiality policies.
At Macro 4, our session manager, Tubes, has been around for decades, providing our customers with secure z/OS access from a central point. It's trusted by major global organizations and used by millions of users every day.
How are session managers changing?
While the core functionality I described above remains very much the same, session management software is advancing in various ways. In the remainder of this article, I will focus on this by describing some of the functionality available in Macro 4's next-generation session manager, Tubes DX (a product I've been closely involved in developing).
One key differentiator of this latest version is that it lets users open their z/OS application sessions remotely from anywhere - using any device with an internet connection. 'Under the covers', it uses a Telnet protocol/link to access a 3270 data stream via the web. JavaScript code uses that data stream information to render the screen as a page on the user's web browser. Users can view their different mainframe sessions in separate tabs on their web browser, making it easy to switch between them.
By enabling mainframe session management on the web, session managers can simplify remote access to IBM Z for the growing numbers of mainframe professionals who work on the move or have embraced home or hybrid working.
Security and single sign-on from IBM Z and Windows
Of course, security must be a priority for web-based mainframe access. Users log in by entering their mainframe login credentials with the session manager relying on the organization's external security manager of choice and their current implementation of multi-factor authentication (MFA). Importantly, Tubes DX refers to Tubes for these security definitions, so no duplicate effort is required for enterprises that are upgrading.
Another important ease-of-use aspect that is perfect for the way many mainframers work today is a single sign-on facility that lets them access their IBM Z applications from within the Microsoft Windows environment (without needing to provide separate credentials). The door to the mainframe is unlocked from within Windows with trust provided by the Kerberos network authentication protocol. So, you can switch between Windows and IBM Z without having to log in separately.
Terminal Emulation cost savings
Many companies typically deploy 3270 terminal emulation software on desktops and laptops throughout the enterprise to give users access to mainframe applications. The beauty of browser-based access via a session manager like Tubes DX, is that there is no need for costly terminal emulation software. This is a significant benefit: the licencing and maintenance costs of terminal emulation can quickly ratchet up if you have to install and update the software on thousands of devices, as some mainframe shops do.
Contributing to mainframe modernization
Web-based mainframe access and the ability to access IBM Z from within the Windows environment help to improve the mainframe user experience, making it more familiar to the modern generation of IT workers.
Another way that Tubes DX provdes a handy shortcut in this area is by providing an optional modern menu-driven interface that is more intuitive and easier to navigate, both for newer staff (who may not be used to the traditional 3270 green screen interfaces) and experienced users. Rather than having to remember 3270 commands, a session manager interface like this offers ease-of-use features such as point-and-click navigation, drop-down menus, and touchscreen functionality for mobile device users.
The story continues
Of course, the story is not going to end there. Session managers will continue evolving, and at Macro 4 we will keep trying to find ways to provide additional functionality to our session management software. Importantly, with Tubes DX, because we have control over the library codes, it is easy to add new features with server-side code (which can be Python, Java, etc) and the front end using JavaScript.
For example, as most AI code is written using Python or Java, it may be that in future we would consider adding some form of AI functionality into Tubes DX (perhaps AI-driven automation or analytics).
There's much more to mainframe session management software than many people in the industry might think. Take another look!
This blog is also published on the IBM Community.