That's a new thing. And it's worse now than it ever has been.

When we had local, properly integrated AD no one had to log into anything other than their computer.

The whole SSO / SAML thing is a huge regression in usability.