For posterity, in my case it was simply that the user forgot that they had set up MFA and didn't respond to the push notification on their phone. 😕 So the VPN eventually timed out.  ... View more