We're in the process of diagnosing an issue where our on-premise ADFS servers stop accepting requests from the ADFS proxy servers for short (5m intervals).
One behavior that we're having difficulty understanding is that when ADFS stops responding, Outlook client users get prompted to re-authenticate, and get disconnected when the token request times out. One suggestion was that there is some sort of network session reset, but we have been unable to identify this happening on the network path for Outlook users.
Per the documentation and Microsoft support, users are issued login tokens with a default TTL of 8 hours. If that were true, why are the users being challenged to re-authenticate?