Error while resetting Mainframe user account Password

IdentityIQ (IIQ) IIQ Discussion and Questions
, , ,
1

Which IIQ version are you inquiring about?

8.5P1

Share all details about your problem, including any error messages you may have received.

Hi all,

We have a Mainfram RACF connector. Now we are trying to enable Mainframe users to reset their RACF account Password from Sailpoint through Manage Password screen. While testing, we are getting below error .

2026-02-24T12:03:11,162 ERROR https-jsse-nio2-8443-exec-1 sailpoint.provisioning.PlanEvaluator:2781 - Provisioning failure: 00285067 on CBA Core Mainframe
2026-02-24T12:03:11,174 ERROR https-jsse-nio2-8443-exec-1 sailpoint.provisioning.PlanEvaluator:2822 - PreScript Message: ActualMsg: 2026/02/24 12:03:11 CTS1403I R Update User AUTEVT2 in Connector CBA-DEV-CBI2 by MXSAILI2 () SIID 584110676:
2026/02/24 12:03:11 CTS3016I R >>> "CTSAEXC ALTUSER AUTEVT2 NOEXPIRED PHRASE('******************')"
2026/02/24 12:03:11 CTS3016I R ICH21005I NOT AUTHORIZED TO SPECIFY PHRASE/NOPHRASE, OPERAND IGNORED.
2026/02/24 12:03:11 CTS3016I R +++ RC(4) +++
2026/02/24 12:03:11 CTS3029W T Permanent password update failed. Trying temp for user AUTEVT2
2026/02/24 12:03:11 CTS3016I R >>> "CTSAEXC ALTUSER AUTEVT2 EXPIRED PHRASE('******************')"
2026/02/24 12:03:11 CTS3016I R ICH21005I NOT AUTHORIZED TO SPECIFY PHRASE/NOPHRASE, OPERAND IGNORED.
2026/02/24 12:03:11 CTS3016I R +++ RC(4) +++
2026/02/24 12:03:11 CTS3024E R Failed to update password of user AUTEVT2
2026/02/24 12:03:11 CTS3024E R Failed to update password of user AUTEVT2
2026/02/24 12:03:11 CTS1434I R USA-API operation failed (rc = FATAL)

Sailpoint is triggering below command :

CTSAEXC ALTUSER AUTEVT2 NOEXPIRED PHRASE(‘******************’)

Instead, Mainframe team suggest that it should trigger

CTSAEXC ALTUSER AUTEVT2 RESUME PHRASE(‘******************’)

How can we customise to trigger RESUME command here while resetting the Password?

2

Is the user account active and not revoked?

I don’t think you can change the command the connector uses to perform specific operation

Did the mainframe team try to run the exact command for same user directly on mainframe. If it also fails then it’s not connector issue

If it works then it may the issue with password value used from Sailpoint

3

@sahoos9 You might want to connect with Sailpoint Connector via support ticket. This seems to be checked with them to actually understand if we really ned to change it to RESUME.

4

@sahoos9 Could you please share your plan for review?

5

Hi Neel,

I have raised a request with Sailpoint Support team and currently its been reviewd.