Please can someone help me explain tokens in Azure AD SSO / SAML ??

Ronnie Jorgensen 1 Reputation point
2020-01-17T14:01:00.257+00:00

First of all, please excuse my ignorance. I am somewhat new to the world of SAML and Azure AD SSO and can just barely get this stuff to work with Azure AD SSO for cloud apps.

I would like someone to help me explain how i could change lifetime tokens to help me get to our goal of less logins on some cloud apps we have set up.

I have read https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes

The problem i have, IT has received feedback from leadership and regular users that Workday app that we have set to use Azure AD SSO on mobile devices is not consistent in when it ask people to log in. Some says they can log in, then minimize the app and next day they can open the app again and they are not asked to re-authenticate. Then others say they authenticate and then also minimizes and a couple of hours later they are asked to re-authenticate.

I need to look for some diagram training i think that explains this in more detail. But if someone where could explain how this works and in which order do things happen.

Im reading about Access Tokens, SAML tokens, Single Sign On Session Tokens, Refresh tokens etc etc. But i am not understanding it. :(

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,337 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 94,366 Reputation points MVP
    2020-01-17T17:05:08.87+00:00

    The method referenced above is going to be deprecated soon, you should use a Conditional Access policy instead: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime

    0 comments