Comment by ExoticPearTree

You should be angry at whoever set it like that. In O365 you can sessions last as much as you want.

Currently MS recommends a 90 day window between MFA re-authentication for known devices/browsers you already authenticated on.