Right now, as soon as the session is invalidated, you have to redo the MFA. There is no mechanism in place to remember the device passed that.