diff --git a/apps/aaa/src/main/java/org/onosproject/aaa/AAA.java b/apps/aaa/src/main/java/org/onosproject/aaa/AAA.java
index 021beb7..72a5b12 100644
--- a/apps/aaa/src/main/java/org/onosproject/aaa/AAA.java
+++ b/apps/aaa/src/main/java/org/onosproject/aaa/AAA.java
@@ -397,8 +397,9 @@
                             radiusPayload.addMessageAuthenticator(AAA.this.radiusSecret);
                             sendRADIUSPacket(radiusPayload);
 
-                            // TODO: this gets called on every fragment, should only be called at TLS-Start
-                            stateMachine.requestAccess();
+                            if (stateMachine.state() != StateMachine.STATE_PENDING) {
+                                stateMachine.requestAccess();
+                            }
 
                             break;
                         default: