AZF7020E Valid PassTicket denied by MFA policy


    Explanation
      If IBM® MFA is configured to require an IBM MFA logon for the user prior to PassTicket
        evaluation, the most recent IBM MFA authentication
        for the user must have occurred within the PassTicket evaluation window. 

    

    User response
      The user must re-authenticate.