F5 APM SAML skip MFA for X days

We have a single sign-on setup that works with SAMLv2 where F5 APM is the Idp and authentication is done via MFA. This works for single sign-on within the same browsing session. If a user connects to...