Limit logon hours office 365 using single sing-on

Question

Limit logon hours office 365 using single sing-on

Jéssian Bayard 41

Hello Guys

I can do the limit hours for the users in Office 365 using only Single Sign-On (SSO)?

user sing-in

patrickmeeuwis 170 Reputation points

2023-09-07T17:51:12.73+00:00

Hi @Jessian Bayard I guess there is not such thing as giving access within a time-range, but maybe you can use a powershell-script which you can run when you would like to enable or disable access

https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/disable-user-sign-in-portal?pivots=aad-powershell
Jéssian Bayard 41 Reputation points

2023-09-08T11:01:14.2+00:00

ok, but if i need configure the Pass-Through?

I started in a company new and is not configured the Pass-Through. i can enable The Pass-Through now with the AD alredy configuraded?
JamesTran-MSFT 32,791 Reputation points Microsoft Employee

2023-09-14T22:59:02.9866667+00:00

@Jéssian Bayard

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

patrickmeeuwis 170 Reputation points

2023-09-07T17:51:12.73+00:00

Hi @Jessian Bayard I guess there is not such thing as giving access within a time-range, but maybe you can use a powershell-script which you can run when you would like to enable or disable access

https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/disable-user-sign-in-portal?pivots=aad-powershell
Jéssian Bayard 41 Reputation points

2023-09-08T11:01:14.2+00:00

ok, but if i need configure the Pass-Through?

I started in a company new and is not configured the Pass-Through. i can enable The Pass-Through now with the AD alredy configuraded?
JamesTran-MSFT 32,791 Reputation points Microsoft Employee

2023-09-14T22:59:02.9866667+00:00

@Jéssian Bayard

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 1

@Jéssian Bayard

Currently Azure authentication doesn't have an option to limit user's authentication for certain hours.

If you have users syncing from on-premise to Azure AD and if user authentication is configured for pass-through authentication then you can limit this.

To achieve this you can configure the access token to expire after certain time. Once the access token is expired, user will be asked to re-authenticate. you can also configure revoking of access token post certain hours using conditional access policy.

When access token is revoked and when user is asked to re-authenticate, user is asked to provide credentials again.

Authentication request will redirected to on-premises. Now in on-premises you will have to configure policy to stop authenticating users post certain time.

You can refer below article to configure access token revoking,

https://learn.microsoft.com/en-us/azure/active-directory/develop/configure-token-lifetimes

https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session#sign-in-frequency

Let me know if you have any further questions on this.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Limit logon hours office 365 using single sing-on

1 answer

Activity