Console commands
Related topics
Commands and parameters refernces
The following table displays a list of console commands that you can issue in the EC for Okta server:
| Command | Command function |
| S procname | Starts the EC for Okta server |
| P ssid | Stops the EC for Okta server |
| F ssid,SPIN | Forces the RSOLOG to close and reopen (SPIN) |
| F ssid,ALTER MAXTASKS( 1 – 255 ) | Changes the maximum number of authentication threads to the Okta server |
| F ssid,ALTER TIMEOUT( 1 – 300 ) | Changes the authentication request timeout limit This limits the amount of time an authentication request waits for a response from the Okta Gateway. Access is denied upon timeout. |
| F ssid,DISPLAY PARMS | Displays the current value of the processing parameters, including any modifications made via the ALTER console command. |
| F ssid,DISPLAY STATS | Displays the current real-time processing statistics |
| F ssid,LISTEXIT | Lists the ICHRIX02 dynamic exits |
The EC for Okta server is non-cancellable. If the server does not terminate when you use the P ssid command, you must issue a FORCE ssid to terminate the server.
The EC for Okta server produces a log (RSOLOG) that records authentication requests and their responses. Messages similar to the following ones are produced:
2025/03/23 12:50:59.236 RSO0990I Processing authentication request for ?userid
?user name
JOBNAME(?jobname) JOBID(J0454596) ASIDX(0319)
2025/03/23 12:51:16.071 RSO0998I USER ?userid access denied by user on 03/23/2025 at 12:50:58
?user name
JOBNAME(?jobname) JOBID(J0454596) ASIDX(0319)
Message RSO0998I indicates that access is denied and provides a description of the denial. The following table displays the message descriptions:
| Access type | Description |
| Denied by user | User responded NO to the verification request |
| Denied by password fallback | MFA connection failure. Password fallback denied access |
| Denied (negative MFA response) | Negative response from the Okta server (possibly MFA ID is not valid) |
| Denied by exit failure | EC for Okta exit failure. Password fallback denied access. Possibly an abend in the exit |
| Denied by timeout failure | EC for Okta timeout occurred. Password fallback denied access |
Message RSO0999I indicates that access is allowed and provides a description of the authorization. The following table displays the message descriptions:
| Access type | Description |
| Allowed by user | User responded YES to the verification request |
| Allowed by password fallback | MFA connection failure. Password fallback allowed access |
| Allowed (MFA bypassed) | MFA verification is not required |
| Allowed by exit failure | EC for Okta exit failure. Password fallback allowed access. Possibly an abend occurred in the exit |
| Allowed by timeout failure | EC for Okta timeout occurred. Password fallback allowed access |