# JES Job Monitor authentication

Client authentication is done by RSE daemon (or REXEC/SSH) as part of the client's connection request. Once the user is authenticated, self-generated PassTickets are used for all future authentication requests, including the automatic logon to the JES Job Monitor server.

In order for JES Job Monitor to validate the user ID and PassTicket presented by RSE, JES Job Monitor must be allowed to evaluate the PassTicket. This implies that:

- Load module `FEJJMON` , by default located in load library `FEK.SFEKAUTH` , must be APF authorized.
- Both RSE and JES Job Monitor must use the same application ID (APPLID). By default both servers use `FEKAPPL` as APPLID, but this can be changed by the `APPLID` directive in `rsed.envvars` for RSE and in `FEJJCNFG` for JES Job Monitor.

Parent topic: Enhanced client authentication support