Any update on this request, I just set up Duo 2fa for screen connect and our users still have to select "login" after approving the Duo push.