zCEE to add support for basic authentication without requiring CLIENT-CERT

We are using zConnect (FMID HZCN200) to run IMS mobile feature pack services. We have IHS (web server) frontend the zConnect server. Most of our traffic will go through IHS to zConnect server. In our development environment we allow users to go directly to the zConnect
server. For request coming to IHS, a client cert is required by IHS. For request coming directly to zConnect server, userid & password is required.

In our zConnect environment, we use TAI (trust associate interceptor) to verify the request. If traffic is from IHS, then TAI would allow it, defaulting to a runtime userid TAI specifies. If the traffic is not from IHS, then TAI would default to userid/password authentication.

For each request coming from IHS to zConnect, we could see an ACF2 message in the task joblog:
ACF01097 NO USERID SPECIFIED ON SYSTEM ENTRY VALIDATION REQUEST

In this situation, a client cert has been verified by IHS, and the traffic goes to zConnect, which then defaults to a runtime id by TAI. It seems zConnect still makes a call to ACF2 to check the userid. Can you please take a look at it to see if the call to ACF2 is needed, and what we could do to avoid the extra step, and extra message?