After upgrading Top Secret maintenance, TSO and MFA signon messages change in the order they appear.
Before:
<passphrase is entered on TSO logon panel>
TSS7000I USERA LAST-USED 31 JAN 24 11:55 SYSTEM=SYSJ FACILITY=TSO
TSS7001I COUNT=00028 MODE=FAIL LOCKTIME=NONE NAME=USERA
<push sent and accepted>
TSS7058I PASSCODE VALIDATION COMPLETED FOR MFA CONTROLLED USER
***
<enter>
<... rest of logon messages>
After:
<passphrase is entered on TSO logon panel>
<Enter>
<blank screen>
<push sent and accepted>
TSS7058I PASSCODE VALIDATION COMPLETED FOR MFA CONTROLLED USER
***
<enter>
TSS7000I USERA LAST-USED 31 JAN 24 11:50 SYSTEM=CPU6 FACILITY=TSO
TSS7001I COUNT=00192 MODE=FAIL LOCKTIME=NONE NAME=USERA
<... rest of logon messages>
The behavior change was caused by LU10336, which modified the parameter list passed to AAM.
This modification caused an additional RACROUTE VERIFY request to be sent to check if MFABYPASS is active.
As a result, the TSS7000/7001 messages were displayed before receiving the PUSH notification.