Limit logon hours office 365 using single sing-on

Question

Hello Guys

I can do the limit hours for the users in Office 365 using only Single Sign-On (SSO)?

Answer 1

@Jéssian Bayard

Currently Azure authentication doesn't have an option to limit user's authentication for certain hours.

If you have users syncing from on-premise to Azure AD and if user authentication is configured for pass-through authentication then you can limit this.

To achieve this you can configure the access token to expire after certain time. Once the access token is expired, user will be asked to re-authenticate. you can also configure revoking of access token post certain hours using conditional access policy.

When access token is revoked and when user is asked to re-authenticate, user is asked to provide credentials again.

Authentication request will redirected to on-premises. Now in on-premises you will have to configure policy to stop authenticating users post certain time.

You can refer below article to configure access token revoking,

https://learn.microsoft.com/en-us/azure/active-directory/develop/configure-token-lifetimes

https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session#sign-in-frequency

Let me know if you have any further questions on this.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.