While ITS has tried to find a balance between security and convenience (meaning you do not necessarily get prompted to sign-in to your account every time you access an application or service), you must always be prepared to satisfy a 2FA challenge.
Every time you sign-in to a ECUAD application or service which uses our Microsoft Single Sign-On Service. In other words, whenever you enter your ECUAD email address and password in the ECUAD/Microsoft Azure sign-in windows.
Because ECUAD utilizes a "Single Sign-On Service", the number of times you are prompted to sign-in from within the same web browser or on the same device is greatly reduced. This means that the number of times you are prompted with a 2FA challenge is also greatly reduced. However, you should always have your 2FA method on-hand and at the ready so that you are not caught off guard.