We use Duo Access Gateway for SAML/SSO and it works well. We have configured our session duration parameter to 1 week. So if a user signs into DAG in their chrome browser on their desktop, they never have to sign into any other applications for 1 wee...