The PTKTDATA class when “active” enables RACF to validate PassTickets. Identity Token Support leverages PassTickets in the token generation process.
A PTKTDATA class profile should be created. The profile name must be RACFJWT and bypass replay protection should be enabled. These attributes are populated accordingly in the PTKTDATA sample member.
For more details about setup and usage, see Identity Token Authorization Configuration.
Reference
z/OS Security Server RACF Security Administrators Guide.