Forum Discussion

testuser7's avatar
testuser7
Brass Contributor
Nov 18, 2020

AAD sign-in frequency with persistent browser session

Hello, 

I have set up "sign-in frequency"  session control  with 1 hour.

I have NOT set  “persistent browser session”

As expected, I sign into  portal.azure.com  and kept the browser open for one hour.

 Right after  sign-in frequency time passed, I was asked to sign-in again. 

 

 

I just want to extend this conditional policy configuration with one more thing.

If I had also turned  ON “persistent browser session”,  what would be the change in the behavior once the configured sign-in frequency passed.

 

My observation was, “NO CHANGE”

Meaning I was forced to sign in again.  My impression was that “persistent browser session” setting will avoid user  to put his credentials again.

Am I missing some important thing here ?

 

Appreciate your help !!!

 

Thanks

 

Access Management
Azure Active Directory (AAD)
Identity Management
  • Pontus Själander's avatar
    Pontus Själander
    Iron Contributor
    Dec 10, 2020

    Hello!

     

    To my knowledge, the persistent browser session is not overriding/affecting the actual token lifetime or the sign-in frequency configuration.
    Just because you set this to persistent, the session won't live any longer then what you have configured.
    This is simply an solution for making sure that the end-user is able to terminate the browser, reopen it during the token lifetime and remain signed-in.