SSO Timeout Assistance

Our users are experiencing issues when leveraging our EPM products with session timeouts. There will be instances where they are working actively in a web page, only to click on an action and the browser signs them out (so it's not an idle session). We would like to gain more understanding around the timeouts and request assistance with optimizing them for minimal disruptions.

For reference, we leverage Microsoft Entra as our SSO provider.
Our EPM environment idle session timeouts are maxed.
Our IDCS timeout setting is also maxed.

Is there any documentation on ideal Microsoft Entra configuration to minimize disruptions, or is there another setting somewhere that we can tweak?