Originally Posted by
rickair7777
Ping is the MFA component of SSO.
The MFA is only required if you sign in from a new device, location, or browser. It's also required if you leave a company page open long enough to get auto logged off.
Maybe CA never requires the MFA.