Can I set up a conditional access on client apps that prompt users to re-authenticate into their installed desktop apps every 30 days

Kingsley Thomas 5

I am trying to set a conditional access policy that forces users in my organization to re-authenticate into their installed desktop client apps every 30 days but I haven't had any success on this. Any help please?

1 answer

Andy David - MVP 147.9K Reputation points MVP

2023-02-14T13:04:28.73+00:00

Have you tested with this?

https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime#policy-1-sign-in-frequency-control
Please sign in to rate this answer.
Kingsley Thomas 5 Reputation points

2023-02-15T23:40:41.0633333+00:00

Yes I have. But whenever the users try signing back in, it is discovered that they could still access their outlook and even send mails without signing back in to their account even though it clearly shows there that their account has some issues that requires them to sign in again to fix

Andy David - MVP 147.9K Reputation points MVP

2023-02-16T12:23:55.5166667+00:00

Are you only seeing issues with Outlook? Do they other apps work as expected? Just confirming that "Remember MFA on trusted devices" is not enabled in the tenant as well. Are they prompted to log back in? What do the Azure sign in Logs show?

Kingsley Thomas 5 Reputation points

2023-02-19T21:56:28.75+00:00

I never tested with other apps.I was fixated on outlook. Would try other apps and see how they behave
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Can I set up a conditional access on client apps that prompt users to re-authenticate into their installed desktop apps every 30 days

1 answer

Your answer