Comment by nijave

Our work SSO is set to 12/24 hours in most places which seems like a decent compromise. Auth once a day

In a corporate environment, ideally your workstation password is tied to SSO and you have a short but reasonable lockscreen timeout where you need to re-type your password.