Yes, this is by design.

 

The first dialog prompt is to authenticate to the site.  The second dialog is a separate authentication request for the office application since it is in a different context.