Check if an Application Update is in Progress Post-Upgrade in Okta Access Gateway

Starting in Okta Access Gateway (OAG) release 2024.11, the application update process executes on the Admin node after the node reboots post-upgrade. Administrators must verify if the update process is running before releasing the environment to users because users may encounter errors while accessing specific applications during the update. This update process only executes when upgrading from OAG version 2024.7 or earlier. During the upgrade, Okta Access Gateway generates the Applications need update. Scheduling update task on reboot log to detail the scheduled task.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Access Gateway (OAG) Version 2024.11 or Newer

How does an administrator check if an application update is in progress post-upgrade in Okta Access Gateway?

Access the management console shell on the admin node and execute the appropriate commands based on the Okta Access Gateway version to verify the update status.

1. Sign in to the management console shell on the admin node.
2. For versions 2024.11.2 and 2025.1, check the status by running the following command:

   ps -ef | grep updateAppsSSPUpgrade | grep -v grep

• • NOTE: When the script completes, the command does not generate any output, as shown in the following example.

    oag-local@admin;/home/oag-local# ps -ef | grep updateAppsSSPUpgrade | grep -v grep
    oag-local@admin;/home/oag-local#

3. For versions 2025.3 and later, run the command from step 2 or review the process logs located at /opt/oag/upgrades/current/Update_Apps.log.
   • NOTE: Once the process completes, Okta Access Gateway displays a completion message, as shown in the following example.

     oag-local@admin;/home/oag-local# sudo tail -3 /opt/oag/upgrades/current/Update_Apps.log
     ###########################
     Application update process completed at : <date>
     ###########################
     oag-local@admin;/home/oag-local#

NOTE: The update process generates application update events and sends them to all worker nodes. If any node is unreachable or experiences latency, event processing takes additional time. Okta recommends testing the applications on the worker nodes approximately 10 to 15 minutes after the completion timestamp. Timings may vary depending on the number of applications or server connectivity issues.