Blog Post

Microsoft Entra Blog
7 MIN READ

End user passwordless utopia

TarekD's avatar
TarekD
Icon for Microsoft rankMicrosoft
Dec 15, 2022
With all the different technologies available in Azure and Azure Active Directory (Azure AD), it’s easy to miss the bigger picture and how they all play into the end user experience.    This incl...
Updated Dec 14, 2022
Version 1.0
identity and access management
TarekD's avatar
Icon for Microsoft rankMicrosoft
Joined May 22, 2019
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for employees, customers, and non-human identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions powered by AI.
MikeCrowley's avatar
MikeCrowley
Iron Contributor
Dec 16, 2022
So why do we need the user to re-authenticate?

Is this a rhetorical question? The answer is "we don't" if their security posture hasn't changed, right? Can you help us understand how to reconcile that sentiment with the below? 

 

"Microsoft recommends configuring https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime to 12 hours.

https://learn.microsoft.com/en-us/azure/active-directory/standards/nist-authenticator-assurance-level-2#reauthentication