...
If you have opted in for two-factor authentication (2FA) or are required to use it as part of your role, you will receive a DUO 2FA authentication prompt when accessing supported systems, even though single sign-on is enabled.
...
Things to remember
SSO is browser specific
...
The length of a SSO session will depend on the specific application, and may range from one to 24 hours.
...
Support tools and resources
...