Edward Jones OL-220-A error

splasher

Since 2/15/2021, The first attempt of the day to do a download from Edward Jones via One Step Update fails with an OL-220-A error.

The second attempt of OSU succeeds.

If you visit the Edward Jones website first, the first attempt at OSU succeeds.

It appears that the EJ security change made in April/May 2020 that filters based on IP addresses has been changed in their website revamp that they implemented on or about 2/15/2021.

I have notified EJ and a ticket was "forwarded" to their programmers.

The easiest work-a-round is to just run OSU twice since it takes more effort to login to their website than to run OSU twice.

R Hyde

I am getting the same issue on February 25

conover1

So am I (OR-220-A) ERROR, WHEN ATTEMPTING One Step Update, Issue is ongoing. Has occurred intermittently for many days. When I complain with EJ they blame Quicken and when I contact Quicken support they blame EJ. Hello Catch-22!

Margaret Luth

I am receiving same error. Had to run One Step Update multiple times. Log into Edward Jones successfully. Then run One Step Update 3 times. Third time worked.

splasher

@conover1@fuse.net @Margaret Luth

Do not let EJ tell you it is Quicken's fault, insist on speaking to a supervisor or tier 2.
Tell them to check with Susan Paduke (sp?), she is aware of this issue. 

ksmms

Same problem here that I was able to resolve. We have several EJ accounts under different email addresses. I logged into our accounts online at Edward Jones, using each email address, and received text codes to verify. We verified our accounts using the EJ text codes, logged in then logged out of each. We were then able to successfully update our Quicken accounts.

R Hyde

If someone gets a fix to this issue, please get a ticket number so that others can refer to it when they call in

splasher

ksmms said:

Same problem here that I was able to resolve. We have several EJ accounts under different email addresses. I logged into our accounts online at Edward Jones, using each email address, and received text codes to verify. We verified our accounts using the EJ text codes, logged in then logged out of each. We were then able to successfully update our Quicken accounts.

Get ready to do it again the next DAY that you download from EJ.

rolanddawson2500

What is the status of this issue? I can not do either one step update OR individual update on the EDJ accounts any more. Other accounts work just fine. The "workarounds" discussed here do not work for me. My non EDJ accounts work just fine.

IreneM

Having the same problem. Usually takes 3 or 4 tries to finally get the one step update to work without OL-220-A message. Finally called Edward Jones this morning and they started a ticket for me. She had me login in to my EJ account and it still did not help.

Rick56

Going to the EJ site and logging in before updating seems to work. Otherwise, the OSU fails every time I try it.

Mike Barry

I'm having the same issue as Roland. Can no longer update at all.

splasher

You ALL need to call EJ and ask for two tier or supervisor.  The problem needs to be escalated to the problem solvers, not the script readers.

Mike Barry

I called EJ Support. Very nice script reader, but all he would do is send my information to the problem solvers and they will supposedly call me back in the next couple days. I sure don't trust that it will be resolved easily.

splasher

To All:
Working with EJ Online Services Rep on this and yesterday we tried clearing history, cookies and cache in the browser.
Immediately after doing so, the EJ OSU download to Quicken worked.  It also worked this AM, but since there weren't any transactions to download it was only a half victory.  If it fails, be sure to try a second time to be sure.
So, you might try doing the clean-up yourself.  
Warning: Doing this cleanup will wipe out any "remembered" information about websites like pre-filling in usernames or cookies that the website uses to authenticate that you are an "approved" user and make you go thru the multi-factor authentication again.  If you really on that information, make sure you know what it is before proceeding.
Doing a CTRL+SHIFT+DEL while in a browser will bring up the correct screen in all browsers.  Since I use three different browsers, I did it to all, but you probably only need to do it with your default browser.

Mike Barry

This morning I decided to shut down quicken and turn it back down to see if by chance EJ fixed something. On shut down I got a message that one of my accounts did not complete its download. So I followed the procedures and it "cleared" my EJ account and updated it. I tried OSU and it worked! Tried again and it still worked. Not sure if they fixed it, but I'm hoping.

splasher

POSSIBLE SOLUTION:

I finally came up with something to try which has worked for me the two days after doing it:

1. Make a backup of your Quicken data file to revert to if this does not work
2. Sign on to the Edward Jones website to ensure that their security knows your IP address
3. Deactivate One Step Update (OSU) for all of your Edward Jones accounts
   Edit the account from the Account List (Tools menu), then select the Online services tab
4. Re-activate all of the EJ accounts for OSU (opposite of #3 above) and LINK (not add) the account to the existing accounts in Quicken
5. If it all works, you should get a download at that time and if it is truly successful, it will work again tomorrow without dong anything but doing a OSU in Quicken.

If none of this works for you, just restore the backup you made and you will be exactly back where you were when you began.

Chris_QPW

@splasher if Edward Jones is remembering the IP address and blocking if it isn't the same as when logging in to the website with your browser that suggests a couple of things to me.  First off for people using a mobile device or for some people that have Internet providers that keep changing their IP address (the outside sees your address as the one the Internet provider provides), then of course this isn't going to work for them.  Not to mention people using VPNs.

I also suggests that there is "missing part" of the security used for Quicken/Edward Jones that Quicken Inc and Edward Jones have to work out.  I know that with Vanguard they have a "cookie" that has to be remembered and passed back to Vanguard for it to consider the connection valid.   Most likely something like this is also happening/needed for Edward Jones.

splasher

@Chris_QPW
I posted this as a possible solution and not a guaranteed fix, it worked for me.  I have had several conversations with a EJ online support rep and according to her, they changed nothing.
I'm not sure when it happened, but the connlog.txt file for Direct Connect to EJ no longer shows any reference to connecting to EJ:

==== Mini-OSU Start (20210312/13:52:09) ====

20210312 13:52:09: Marketing session sending to: https://msa.intuit.com/banking/fimkt/basic/intuit_BASICmac.ini

20210312 13:52:09: QFN: Beginning get from https://msa.intuit.com/banking/fimkt/basic/intuit_BASICmac.ini

20210312 13:52:22: QFN: End get from https://msa.intuit.com/banking/fimkt/basic/intuit_BASICmac.ini, netstatus 0

20210312 13:52:22: QFN: Beginning send to https://services.quicken.com/ofx-secure-plus/823

20210312 13:52:29: QFN: End send to https://services.quicken.com/ofx-secure-plus/823, netstatus 0

20210312 13:52:30: 

==== Mini-OSU End (20210312/13:52:35) ====

so this implies that Quicken transitioned EJ to the new DC method of a Quicken server doing essentially the job of a proxy server.
The solution for users using ever changing IPs is to first log into the EJ website and then do their Quicken downloads.
Since I just moved to a new computer and only yesterday cleaned Quicken off of the old computer, I don't have an CONNOLD.txt  file to look at to see if this is recent development.
If it is a "cookie" technique, EJ is not admitting to it and I did clear the cookies and cache in all of my browsers, logged into the EJ website and it did not help.
Like I said, "POSSIBLE" and for the user to make a backup first.
Only a few users trying it and reporting back will we know if it is just luck for me or a real solution.

Chris_QPW

Sorry I don't want to give the impression that your workaround isn't great effort and might help some.  What I was getting at is that the very fact that "process" works for you implies there is something "hidden", and that is going to bite people sooner or later. As in what is happening in the web browser that isn't happening with Quicken.

Looking at your log is very interesting.  And it reminds me of something that has been mentioned before "a reverse proxy", but I don't see how the web browser would fit into this.  And the more I think about it, it doesn't seem like the "cookie" problem (which would show up in the OFX log BTW).

If I look at your connection log entry and compare it to Vanguard it is like you said nothing about Edward Jones is in there, but there is for Vanguard.   So clearly something is different between the two:

==== Mini-OSU Start (20210312/11:20:50) ====

20210312 11:20:50: Marketing session sending to: https://msa.intuit.com/banking/fimkt/basic/intuit_BASICmac.ini

20210312 11:20:50: QFN: Beginning get from https://msa.intuit.com/banking/fimkt/basic/intuit_BASICmac.ini

20210312 11:20:51: QFN: End get from https://msa.intuit.com/banking/fimkt/basic/intuit_BASICmac.ini, netstatus 0

20210312 11:20:51: QFN: Beginning send to https://vesnc.vanguard.com/us/OfxDirectConnectServlet

20210312 11:20:53: QFN: End send to https://vesnc.vanguard.com/us/OfxDirectConnectServlet, netstatus 0

20210312 11:20:54: 

==== Mini-OSU End (20210312/11:20:58) ====

The whole idea of the "reverse proxy" is to give the financial institution a "fixed IP address".  As In Quicken contacts Quicken server which turns around and contacts financial institution.  Therefore the financial institution sees the Quicken server IP address not yours.  Then they turn around and pass the address information needed for the two "clients" to connect directly and the Quicken server is out of the process.

With security concerns on the rise more and more financial institutions are starting block IP address from "unknown regions".  This "reverse proxy" is suppose to help with that.  And it seems by your connection log:
20210312 13:52:22: QFN: Beginning send to https://services.quicken.com/ofx-secure-plus/823

That is exactly what is happening.  And clearly this would be something that changed on the Quicken side, not at Edward Jones, so all of that would fit, but the fact that it doesn't work (without your workaround) or even the fact that your workaround works shows there is something else going on.  After all your web browser is clearly not going through the Quicken server/IP address....

As I type this I have to wonder.  As I understand the way the reverse proxy works is that it makes the connection and then "hands it off" so that the two are talking directly to each other, it is just there to do the initial connection.  That means that after that initial connection you would be back to using whatever IP address your machine is getting (actually the one the Internet provider gives you).  As such that would be the same one that the web browser uses, and if that "matters" to Edwards Jone's security then in fact the "reverse proxy" hasn't fixed anything, and in fact caused more problems.

splasher

Two more days of successfully downloading from Edward Jones since I did the de-activate/re-activate that I described here: https://community.quicken.com/discussion/comment/20163344/#Comment_20163344

splasher

Another two days of successful downloading from Edward Jones since I did the activate/re-activate (see above).

splasher

5 days of successfully downloading from Edward Jones since I did the de-activate/re-activate of the accounts as described here: https://community.quicken.com/discussion/comment/20163344/#Comment_20163344