It looks like our SSO config works great for admins, but our users are having to log into Self Service every time. The device is never remembered, two-factor login happens every time. We're not able to get a single sign-on...that's the point though.
Workaround? Can Self Service save a login token to allow people to login once?