MFA bypass on salesforce site if already validated MFA on IDP side

So, we received information that Salesforce is going to enforce MFA on each SSO login, as mentioned in the following documentation: 

As described in this document, we enabled MFA using the “Require multi-factor authentication (MFA) for all direct UI logins to your Salesforce org” option under Setup → Identity Verification.

We are sending the following AuthnStatement in the SAML response:

  <saml:AuthnStatement AuthnInstant="2026-01-29T10:11:46.404Z"
                             SessionIndex="e19ce28a63754b40a9361c98504d8d1d"
                             >
            <saml:AuthnContext>
                <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:MobileTwoFactorContract</saml:AuthnContextClassRef>
            </saml:AuthnContext>
        </saml:AuthnStatement>

However, Salesforce is still prompting users for MFA after SSO login.

Is there anything else that needs to be configured on the Salesforce side to bypass MFA, considering that MFA is already being verified at our IdP?

Thanks in advance.