Change Trusted Device MFA Reauthentication Requirement from 14 Days

Question

Hello,

I've recently updated the Number of Days Users Trust Devices For field, and I am uncertain it took effect. Does Microsoft Security Defaults have to be turned off and switched to Conditional Access or does the Days Trusted field take effect regardless?

Link > Service Settings tab: https://entra.microsoft.com/#view/Microsoft_AAD_IAM/MultifactorAuthenticationConfig.ReactView/tabId/users

Answer 1

Hi @Kyle Murphy

When Microsoft Security Defaults are turned on, they enforce stricter security measures, like requiring multi-factor authentication (MFA) for everyone and not allowing the "remember MFA on trusted device" feature. So, if Security Defaults are active, the "Days Trusted" setting won't work.

To use the "Days Trusted" feature, you'll need to turn off Security Defaults and switch to Conditional Access policies. This switch will help you in creating other custom policies also which u might need.

For more info on CA policies,

please follow,

https://learn.microsoft.com/en-us/mem/intune/protect/create-conditional-access-intune

If the answer is helpful, please click ACCEPT ANSWER and kindly upvote it so that other people who faces similar issue may get benefitted from it.

If you have any further questions about this answer, please click Comment.