@dan We have the exact problem.

MFA prompt is ruining the SSO experience.

Can you please share which cookie is supposed to handle the MFA trust.