Hi @X-Box-11-2021 ,
Welcome to the Microsoft Q&A platform!
Yes, this behavior is by design. When users close their web browser and reopen it a few hours later, they may be prompted to sign in again because of security measures in place to protect their account. Because Microsoft 365 passwords are not saved in the browser, the session is not persisted and the user will need to authenticate again.
Additionally, if multi-factor authentication (MFA) is enabled, users will be prompted to approve sign-in requests through Microsoft Authenticator or other configured methods. This helps ensure that only authorized users can access accounts, even if the browser session has expired.
Please feel free to contact me for any updates. And if this helps, don't forget to mark it as an answer.
Best,
Jake Zhang