However, this brings me to ask what other admins do. Since admin roles can't use SAML, how do you handle your day-to-day with various roles? Our accounts have a bajillion roles and I have access to most of them so I can test how changes will affect them. If all of those roles switch to SAML SSO and my admin role doesn't, do you basically just have 2 NetSuite windows open with different accounts? Seems a bit wonky, but I guess if that's what you have to do then that's what you do!

You will be still be limited to one session at a time (SSO & non-SSO). I suppose different accounts (2 licenses) is one way around that if you have that flexibility. If you're testing in sandbox you can turn SSO on and off on the role as you need - given that there's no other on-going testing/efforts that would be disrupted. This way you can figure it out there before moving the changes in prod.

I see most people set up roles that mirror the SSO roles but don't require it.

Thanks for the input! Our admin roles are limited and I'm mostly the only one affected by having a bunch of SSO-enabled roles plus the non-SSO admin role. I was just trying to figure out a way around signing in due to my laziness. But I think I can deal with continuing to sign in.