What about signout out the user automatically when it reaches an idle time out?
https://docs.microsoft.com/en-us/powershell/module/webapplicationproxy/set-webapplicationproxyconfiguration?view=win10-ps
Set-WebApplicationProxyConfiguration
[-UserIdleTimeoutSec <UInt32>]
[-UserIdleTimeoutAction <String>]
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.