question

RuslanIgnatjev-9205 avatar image
0 Votes"
RuslanIgnatjev-9205 asked amanpreetsingh-msft commented

Office 365 session timeouts

Hello,

We want to implement this kind of thing - When a user leaves the office or works from home, all his browser sessions will end when the browser is closed. So this policy will only work when a user is out of office.

Can we do it using some kind of policy or conditional access?

Thanks in advance!

azure-ad-conditional-access
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

amanpreetsingh-msft avatar image
0 Votes"
amanpreetsingh-msft answered amanpreetsingh-msft commented

Hi @RuslanIgnatjev-9205 • Thank you for reaching out.

  • If you are using KMSI (Keep Me Signed In) option, which issues persistent session cookie, sessions cookies are NOT expired when browser is closed.

  • If the devices are Azure AD Registered/Joined/Hybrid-Joined, PRT (Primary Refresh Token) is issued to device, which is leveraged to provide seamless SSO experience to the users when they close and reopen the browser.

  • When KMSI is not used, session cookies expire when browser session is closed.

If you are in any of the above scenarios, you can configure below settings in conditional access policy.

  1. Include all users or required set of users

  2. Include Office 365 under cloud apps

  3. Exclude the subnet(s) that represent your office IP addresses and Include all locations

  4. Under sessions > select checkbox for sign-in frequency > set a time e.g. 3 Hour.

Conditional access policy with above settings configured, would require users to sign-in after every 3 hours when they are out of the office network.


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @RuslanIgnatjev-9205 • Just checking if you had a chance to test it out.

0 Votes 0 ·