Conditional Access and Multiple Browsers

Question

Greetings,

I'm working on finding a solution for a user who currently uses multiple browsers and is getting hit much more than normal by our sign in frequency conditional access policy. They are hit by code 70044 quite a lot. Based on the sign ins it looks like they are all related to using several different browsers and our CA policy being set to a sign in frequency of 30 days.

Any tips for supporting this user (other than requiring them to use one browser)

Thanks,

Liam

Answer 1

Hello Liam,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well. 

I got that you are investigating a Conditional Access (CA) issue where a user using multiple browsers is repeatedly prompted to sign in, despite a 30-day sign-in frequency policy. The user is encountering error code 70044, and you're looking for ways to support them without forcing a single-browser policy.

Just to clarify Sign-in frequency is a Conditional Access session control that defines how often users must reauthenticate and Error code 70044 typically means the session token has expired or is invalid, often due to browser behavior. When users switch browsers, each browser has its own cookie/session/token store, so the session isn’t shared.

If the CA policy is set to 30 days, but the user clears cookies, uses incognito mode, or switches browsers, the session resets and triggers reauthentication so this behavior is expected.

You can try below methods and check:

• Enable Persistent Browser Sessions which allows users to stay signed in even after closing the browser. more at: https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-all-users-persistent-browser
• Try using Device-Based CA Policies which can scope CA policies based on device platform (desktop vs mobile) or device state (managed vs unmanaged). more at: https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-session https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-session-lifetime
• Use Report-Only Mode to Test Changes Before enforcing new policies, use Report-only mode to see how changes affect users. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-report-only
• Review Sign-In Logs for Patterns Use sign-in logs to identify which browsers and devices are triggering reauth. more at: https://learn.microsoft.com/en-us/entra/identity/monitoring-health/how-to-view-applied-conditional-access-policies?tabs=microsoft-entra-admin-center

Kindly let us know if the above helps or you need further assistance on this issue. 

Please "Accept the answer" if the information helped you and 'upvote' for it. This will help us and others in the community as well. Happy to help!

Regards,

Monalisha