CICS maintenance needs to be applied which handles the response codes for CICS commands EXEC CICS VERIFY PHRASE and EXEC CICS CHANGE PHRASE.
Does Ideal use any of those commands?
z/OS
Ideal 15.1
IBM RACF
Ideal does not run any EXEC CICS VERIFY PHRASE/CHANGE PHRASE commands.
When external security via RACF is being used for online signons , Ideal calls CAISSF which is a subservice of CAIRIM, a component of Common Components and Services (another Broadcom product). See the online documentation how this is done: Enabling Online Signons
To check if external security for signons is being used in Ideal , go into Ideal in CICS ( use CICS transaction code IDEA) . Enter in the command line @I$INTERNAL STATUS , press enter and check if SECRTY=Y.
When SECRTY=N then Ideal internal security is being used .