TSS7150A SPECIFY PASSWORD FOR STC= ACID=userid
when signing on to TSO using CA Advanced Authentication Mainframe (AAM)
User needs authorization to the FACILITY they will be signing on to via:
TSS ADD(userid) FACILITY(TCP)
You will also need the following PERMIT with the FACILITY in the resource name.
TSS PERMIT(userid) CASECMFA(TSSMFA.RSA.facilityname) ACCESS(USE)