There is one way around it so that you can get the best of both worlds and when I was testing is to have Password selected then tick the Force Authentication.
It'll force the browser to re-authenticate but the user will have to enter their full Azure credentials (username/password/MFA) at every login/connect. Not ideal but works.
Although, not sure if anyone else has noticed but when disconnecting it takes a couple of minutes. Ticking the Force Authentication makes the disconnect instant.