25,081 questions
I was testing a CA policy but it doesn't appear to be working correctly. I've set it to 4 hours.
When it does sign me out, there's no error, just wants me to sign back in again.
Azure App Registration SSO timeout
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 72%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Steve Deyoung
1
Reputation point
Hello all,
I have a SaaS app registered in Azure App Registration that uses SSO. SSO works fine but the issue I'm facing is that the app automatically signs me out after 15 mins of inactive use. Is there a way to increase this to a longer time? I'm not seeing any obvious setting and have tried searching and can't seem to find out where or if it's possible to make this change. Any advice would be appreciated.
Thanks!
Microsoft Security Microsoft Entra Microsoft Entra ID
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator2021-09-09T22:38:47.99+00:00 You can configure sign-in frequency using a conditional access policy. The minimum frequency is 1 hour.
If you are using configurable token lifetime policies (which only apply to mobile and desktop clients that access SharePoint Online and OneDrive for Business resources), you can set a lower minimum: https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes
Where are you redirected after you are signed out? Do you get any errors or are you just prompted to sign in again. I wonder if this might be an issue with your Redirect URI configuration, in which case you may need to check that your redirect URI in the registration matches what you have set in the application.
What type of account are you using and what sort of application is it? Another thing you can try is going to Settings > Accounts > Email & accounts > Accounts. Select the account that you're using on your apps and make sure that it is set to 'Microsoft apps can sign me in'.
Sign in to comment