Originally Posted by
word302
Hmm, I guess I was confusing SSO with ping.
Ping is the MFA component of SSO.
The MFA is only required if you sign in from a new device, location, or browser. It's also required if you leave a company page open long enough to get auto logged off.
Maybe CA never requires the MFA.