IKJEFLD1 can return a security label to the logon processor in the SECLABEL parameter. IKJEFLD1 must set the SECLABEL bit on. The exit must also set the Don't Prompt bit on.