Is your organization using multi-factor authentication? How is it working for you?
We use MFA with single sign on when we are offsite and it's been pretty easy to use.