When users are trying to log into EINE, they are getting an EIN8502 error and the EINE Server log contains:
*** 2024-01-27 22:15:43.7 *** EINE SERVER initialization started **
*** Server name: EINESRVR
*** Build number: 19.0.0
1*** 2024-01-27 22:15:43.9 *** EINE SERVER initialization completed **
====================================
1*** 2024-01-27 22:16:48.8 *** API function: PING ; User: useridx ; Return code: 0000 ; Reason: 0000 ; Hi Msg ID:
*** Request ID: C8E2C1F0F0F6F7400638735266088F
1*
*** 2024-01-27 22:16:50.8 *** API function: UZYX ; User: useridx ; Return code: 0000 ; Reason: 0000 ; Hi Msg ID:
*** Request ID: C8E2C1F0F0F6F7400638735266099F
1*
*** 2024-01-27 22:17:09.0 *** API function: PTKQ ; User: useridx ; Return code: 0008 ; Reason: 0027 ; Hi Msg ID: AP08027C
*** Request ID: C8E2C1F0F0F6F7400638735266281F
1*
The PTKQ is the new API PassTicket Query transaction introduced by the EINE V18.0 MFA PassTicket PTFs SO07588 and SO08873 which have since been rolled up into V18.1 and higher.
EIN8502:
EINEV1908502 Non-zero return code issued by Endevor API during logon.
AP08027C
means that the security product refused to generate a pass ticket. Based on the Reason code, the credentials provided for the user ID were valid, but the attempt to generate a passticket for this user was rejected. So this is most likely a security setup issue, where RACF/TSS/ACF2 doesn't give the EINE server STC the authority needed to create the passticket for the APPL defined in C1DEFLTS MFAAPPL for the user id that attempted the logon.
Review the passticket generation settings in the security package (RACF/ACF2/Top Secret) with the doc: