How have you been able to solve for this?
We just got a notice our extension runs out beginning of Dec in sandboxes, and late Jan in Prod.

We use OKTA.
Some users can and do log in with username & password.

This is not sufficient for Salesforce and triggers an additional check / verification.

What is the best process to implement these capabilities?
We have roughly 1,500 users that may log in via username & password (and definitely on mobile they do this)...

We want to adhere to the security requirements, but it seems SF is making us jump through hoops.

- Log in with SSO

- Open SF

- Log in again / verify again with another validation function (passkeys, auth tools, etc).

How can we eliminate the multiple login / verification processes to access Salesforce. It's already a headache getting sales users to use the tool... putting up a barrier to actually accessing is another nail.