Console commands
Related topics
Commands and parameters
The following table displays a list of console commands that you can issue in the EC for Okta server:
| Command | Description |
| S procName | Starts the EC for Okta server |
| P ssid | Stops the EC for Okta server |
| F ssid,SPIN | Forces the RSOLOG to close and reopen (SPIN) |
| F ssid,ALTER MAXTASKS(number) | Changes the maximum number of authentication threads to the Okta server |
| F ssid,ALTER TIMEOUT(number) | Changes the authentication request timeout limit, which limits the amount of time an authentication request waits for a response from the Okta Gateway. Access is denied upon timeout. |
| F ssid,DISPLAY PARMS | Displays the current value of the processing parameters, including any modifications made via the ALTER console command |
| F ssid,DISPLAY STATS | Displays the current real-time processing statistics |
| F ssid,LISTEXIT | Lists the ICHRIX02 dynamic exits |
| F ssid,DISPLAY XCF | Generates message RSO0160I and lists all the EC for Okta servers currently associated with the XCF group of the server |
| F ssid,DISPLAY SERVERS | Generates message RSO0165I and lists all the EC for Okta servers running in the sysplex. The servers do not have to be members of the same XCF group |
| F ssid,LICENSE | Processes or reprocesses the BMC license key to activate a new license |
The EC for Okta server is non-cancellable. If the server does not stop when you use the P ssid command, you must issue a FORCE ssid to stop the server.
The EC for Okta server produces a log (RSOLOG) that records authentication requests and their responses, such as the following sample:
?<userName>
JOBNAME(?<jobName>) JOBID(J0454596) ASIDX(0319)
2025/03/23 12:51:16.071 RSO0998I USER ?<userID> access denied by user on 03/23/2025 at 12:50:58
?user name
JOBNAME(?<jobName>) JOBID(J0454596) ASIDX(0319)
Message RSO0998I indicates that access is denied and provides a description of the denial. The following table describes the message content:
| Access type | Description |
| Denied by user | User responded NO to the verification request |
| Denied by password fallback | MFA connection failure. Password fallback denied access. |
| Denied (negative MFA response) | Negative response from the Okta server (the MFA ID might be invalid) |
| Denied by exit failure | EC for Okta exit failure. Password fallback denied access. Possibly an abend occurred in the exit. |
| Denied by timeout failure | EC for Okta timeout occurred. Password fallback denied access. |
Message RSO0999I indicates that access is allowed and provides a description of the authorization. The following table describes the message content:
| Access type | Description |
| Allowed by user | User responded YES to the verification request |
| Allowed by password fallback | MFA connection failure. Password fallback allowed access. |
| Allowed (MFA bypassed) | MFA verification is not required. |
| Allowed by exit failure | EC for Okta exit failure. Password fallback allowed access. An abend might have occurred in the exit. |
| Allowed by timeout failure | EC for Okta timeout occurred. Password fallback allowed access. |