I found one article, with instructions for the AP CLI. You might need to do this on each one, or create a script...
The Resolution is to extend the default EAP timeout values by AP CLI command, for the 802.1x WLAN, ie wlan4.
rkscli: set cryptodef wlan4 wpa eap supptimeout 10
rkscli: set encryption wlan4 update
rkscli: set cryptodef wlan36 wpa eap supptimeout 10
rkscli: set encryption wlan36 update
When we increase the supplicant timeout to 10 seconds or more it fixed the issue.
Increase the timeout as required.