I’m so glad you asked this question. We have the same situation. I think the second prompt is coming from the windows server not from epicor but I don’t know how to make it stop. In our case entering domain\username doesn’t work (only username). We have people using both Edge and chrome.
Toby, they came back to me and said that it wasn’t related, so I am not sure if something got changed up or what happened.
BUT, they did tell me the domain thing/extra windows security window was a bug, but couldn’t provide me the PRB because they didn’t have access to JIRA.
I had a brief discussion about SSO and Kinetic browser with an Epicor team member at Insights last week. He said that the Windows security popup was a known issue and should be fixed in 2023.2, possibly a patch to 2023.1. I don’t have any more detail than that, but it does sound like they are aware of it.