It looks like our SSO config works great for admins, but our users are
having to log into Self Service every time. The device is never
remembered, two-factor login happens every time. We're not able to get a
single sign-on...that's the point though. ...