AWS Single Sign-on with Azure AD: How to force to ask password every single login

I have implemented Single Sign-On (SSO) with Azure AD using SAML 2.0. When a user logs in with the SSO URL, they are redirected to the O365 login page, where they go through the Multi-Factor Authentication (MFA) process, and the user is successfully logged in. However, when a user signs out from the portal and then, after some time, attempts to log in again, they are not prompted for login credentials and are automatically signed in. I'm aware that the session can be controlled by applying a conditional access policy, but is there any way to require credentials for every single login