A single user keeps being asked for authenticator when they access a sharepoint site.

Question

Hi

We have a user that keeps being asked for authenticator when they go into sharepoint. It does not seem to remember that they are already logged in

Answer 1

Hello Everything Tech,

Thanks for your question.

The screenshot indicates that the Conditional Access Policy requires MFA for accessing Office 365 SharePoint Online. The policy details show that the grant control for MFA is not satisfied, causing the user to be repeatedly asked for authentication.

You can check the exact grant control failure from the sign in logs https://learn.microsoft.com/en-us/entra/identity/monitoring-health/concept-sign-ins#interactive-user-sign-ins

See: https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-grant for further grant info

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola

Answer 2

As akinbade abiola mentioned, the use requires multi-factor authentication to access SharePoint online.

Please follow below article to set up Microsoft 365 sign-in for multi-factor authentication.

https://support.microsoft.com/en-us/office/set-up-your-microsoft-365-sign-in-for-multi-factor-authentication-ace1d096-61e5-449b-a875-58eb3d74de14

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

The difference between SharePoint and Outlook is because each application has its own OAuth Refresh Token that isn't shared with others.

In the office client applications, the default time period is 90 days.

In the browser, without any session lifetime settings, there are no persistent cookies. Every time a user closes and opens the browser, they get a prompt for reauthentication.

Here are methods for you choose to configure session lifetime settings in the browser.

1.In the conditional access policy, set sign-in frequency policy. (It is the recommended way.)

https://learn.microsoft.com/en-us/entra/identity/conditional-access/howto-conditional-access-session-lifetime

2.Keep the Remain signed-in option enabled and guide your users to accept it.

https://learn.microsoft.com/en-us/entra/fundamentals/how-to-manage-stay-signed-in-prompt

3.Remember multifactor authentication.

https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-mfasettings#remember-multi-factor-authentication

A reference article to introduce more:

https://learn.microsoft.com/en-us/entra/identity/authentication/concepts-azure-multi-factor-authentication-prompts-session-lifetime

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.