After change password, can existing session continue?

Question

question

TonyP-6592 asked Apr 11, '22 JamesTran-MSFT commented May 12, '22

After change password, can existing session continue?

User clicked on malicious url in email.
After change password, can existing session continue?

azure-ad-microsoft-account

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-04-11T17:15:32.603Z

TKujala answered Apr 11, '22 JamesTran-MSFT commented May 12, '22

Hi @TonyP-6592,

Yes, it can.

https://docs.microsoft.com/en-us/microsoft-365/enterprise/session-timeouts?view=o365-worldwide

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JamesTran-MSFT · May 12 at 05:55 PM

@TonyP-6592
Thank you for your post!

Adding onto what TKujala linked, when users authenticate in any of the Microsoft 365 web apps or mobile apps, a session is established. For the duration of the session, users won't need to re-authenticate. Sessions can expire when users are inactive, when they close the browser or tab, or when their authentication token expires for other reasons such as when their password has been reset.

For more info on the different session timeouts:

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 ·

image.png (78.0 KiB)

question