I have the same frustration at current $BIG_CORP employer. It's maddening to think how much productivity must be lost by 100s of engineers being interrupted many times a day by this! Granted, I know nothing about how it is implemented, but I struggle to comprehend why this is necessary - the SSO client knows I authenticated literally minutes go from this device...how is that not sufficient verification!?