I synchronized our cloud site, SSO, and configured Azure conditional access to leverage Azure MFA for push based multifactor. It seems as though you are forced to have TOTP enabled for MFA if you leverage SSO. This means you login, approve the Azure ...