Dynamic Workload Console considerations

Dynamic Workload Console V9.5 or later uses WebSphere Application Server Liberty Base to handle the initial user verification. In all cases, however, it is necessary to obtain a valid corresponding RACF® user ID to be able to work with the security environment in z/OS®.

Note: You cannot control the port from which the Dynamic Workload Console server started task replies to a request from the Z connector. The response ports are randomly selected.
To optimize the thread handling between Z connector and the scheduler server, you can group console users by RACF® user ID. To define this grouping, associate a list of console users to the same RACF® user ID, by editing the TWSZOSConnConfig.properties file located in:
DWC_DATA_DIR\usr\servers\dwcServer\resources\properties
Where DWC_DATA_DIR is, by default, %Program Files%\wa\DWC\ on Windows, and /opt/wa/DWC on UNIX.
In TWSZOSConnConfig.properties set the last two properties as follows: 
com.ibm.tws.zconn.usr.mapping.enable=true
com.ibm.tws.zconn.usr.mapping.file=mapping_file_path\mapping_file
where mapping_file is the name of the file that contains the mapping between console user and RACF® user ID, as in the following example: 
engine=zos1919 user=twsuser1,twsuser2 zosuser=zos1919user1
               user=twsuser3,twsuser4 zosuser=zos1919user2