How do I disable Oracle MFA if users are authenticated by a third party identity provider?

I added Microsoft Entra (fka AzureAD) as a third party entity provider and users are now able to sign in using this. But users are still prompted for Oracle MFA and we would like to disable that since we already have MFA within Microsoft Entra.

I looked at the sign on policies and we have 3: Default Sign-On Policy, Security Policy for OCI Console and User Category Based Sign-On Policy. I am not clear on which one is used for what, but through process of elimination looking at the sign on rules for each of these, the only one that had a sign on rule with Prompt for an additional factor checked was Security Policy for OCI Console and that had 2 sign on rules called MFA for administrators and MFA for all users. So I assume this is what is used.