How do managed users and JWT launch assign a 5250 device name before the host session opens?

In Admin User Management, enable user management, map the JWT query parameter and username claim, and set per-user device name, printer, and session count. Requiring JWT is gated to AS/400 (TN5250). At connect time OL Terminal decodes the JWT (no in-product signature check), looks up the managed user, and applies device settings before the host session opens. Missing or malformed JWT returns 401; unknown or disabled user returns 403. Test JWT is unsigned and for local testing only.