Forum Discussion
Im confused over MFA and re-authentication prompts
Can someone please help me to understand this. I have been asked by a few colleagues now why they are being prompted fairly often to re-authenticate with MFA. So i removed today the Remember ...
Your best bet is to check the AAD sign in logs for when a prompt happens at sign in and see what's going on.
It could be a few things such as private/legacy/unsupported browsers, new locations etc.
If you have hybrid join and want to bypass MFA requirement then I'd suggest using device hybrid join as a requirements and setting the CA option to "require one if the selected controls"
Session policies relate more the expiring active sessions than preventing prompt, they are a Max rather than a minimum.
If the session itself is closed and the machine does not have a refresh token from AAD then it will be promoted.
It could be a few things such as private/legacy/unsupported browsers, new locations etc.
If you have hybrid join and want to bypass MFA requirement then I'd suggest using device hybrid join as a requirements and setting the CA option to "require one if the selected controls"
Session policies relate more the expiring active sessions than preventing prompt, they are a Max rather than a minimum.
If the session itself is closed and the machine does not have a refresh token from AAD then it will be promoted.