Is there any way to require MFA and reauthentication under 1 hour for an enterprise app in Azure AD?

Question

Dear all, good afternoon.

I have an enterprise application that establishes SAML 2.0 SSO with an external application. I need this application to request reauthentication and MFA in less than an hour. Conditional access prompts to select all cloud apps and the accepted minimum for re-authentication is one hour.

Is there any way to invalidate this application's token or request re-authentication in less than an hour?

Answer 1

Hi, I know of no way to set to less than to an hour for sign-in frequency.

You could try "Every Time" however it may not work for every app

https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime#policy-1-sign-in-frequency-control