Hi Connie, 

Indeed, we are tightening the security. If your organization has set up single sign-on, i.e. using LFDS to create one user credential for both repository and forms, you still only need to sign in once.

In contrast, if you are using separate accounts between repository and forms, or one of them is not included in your LFDS configuration, you will need to sign in to the repository account and forms account separately. On the revised sign-in screens that were released with 10.4.2, you should be able to see whether you are signing into the repository or the form at each step. In the past, we simply used one credential to try both, and very often it worked. This has been identified as a security risk. 

Hope this information helps. Thank you,

Hui