Lately I've been paying attention to which apps defer 2fa to your login provider if you use SSO/SAML

Some layer their own 2fa on top and some defer to the auth provider. interesting trade-offs in security vs PITA-ness.

Comments