RRAS VPN with Microsoft Entra MFA reauthentication time limit

Question

Hello,

We have an on-premise RRAS hosting an SSTP VPN, we have also set this up with RADIUS to a NPS server with Entra MFA configured. This solution works fine on a good internet connection, users are prompted and stay connected, but not all users have reliable connections, especially those travelling or working far abroad, this means every time the connection drops, they have to authenticate all over again, for something this has been as frequent as every couple minutes. Is there a way to have MFA not be asked every time upon connecting? I have looked through Entra conditional access it seems there is no clear answer in either the portal or documentation.

The 90 day MFA reauthentication for things like browser logins works fine, and we have no issue with that, the issue is specific to the MFA authentication over the NPS server having no reauthentication time.