SonicWall’s SSLVPN service lets users authenticate with an alternate credential instead of SAML, meaning MFA enforced only through SAML can be sidestepped by anyone holding a valid non-SAML login.