Starting OAG release 2024.11, the application update process (if required*) will be executed on the Admin node after the node gets rebooted post-upgrade. This is done by adding a task in crontab to execute the application update script after reboot. The following log can be seen when the upgrade is running, which details the scheduled task: 

Applications need update. Scheduling update task on reboot

After the reboot is completed, the scheduled task will be executed. The completion time depends on the number of applications and network latency between the Admin node and IDP. Until this task is completed, users may see errors while accessing a specific application.

This article provides the steps to check if the update process is running. It is recommended that the system be released to users only when the update process is completed. 

NOTE: The application update process will only execute if the upgrade was done from 2024.7 or below. 

• Okta Access Gateway version 2024.11 or above

1. Log in to shell on the admin node. 
2. For versions 2024.11.2 & 2025.1:
   1. Check the status with the following command: 

      ps -ef | grep updateAppsSSPUpgrade | grep -v grep 

   2. When the script is completed, the command will not generate any output. For example: 

      oag-local@admin;/home/oag-local# ps -ef | grep updateAppsSSPUpgrade | grep -v grep 
      oag-local@admin;/home/oag-local#

       
3. For versions 2025.3 and later, steps similar to step 2 can be used. However, the process logs can also be referred to from /opt/oag/upgrades/current/Update_Apps.log. Once the process completes**, a completion message can be seen as shown below:
   

   oag-local@admin;/home/oag-local# tail -3 /opt/oag/upgrades/current/Update_Apps.log 
   ###########################
   Application update process completed at : <date>
   ###########################
   oag-local@admin;/home/oag-local# 

   NOTE: The update process generates application update events that are sent to all the worker nodes. If any node is not reachable or if there is latency between the nodes, event processing will take time to complete. Okta recommends testing the apps on the workers after around 10 to 15 minutes of completion, as shown in the timestamp above. However, the timings may vary if there are a large number of apps OR if any server has connectivity issues.