Forum Discussion
MFA prompt frequency
Generally speaking, yes. The token can expire in the event of password change, or if revoked by admins.
"Once every 90 days" is for the scenario when you don't use the application continuously. If you do, the token is renewed automatically, and unless something like a password change occurs it will never prompt for creds. Since multi-factor auth is considered more secure, for it the 90 days inactive period doesn't apply, and it is now indefinite. More details for example here: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes
Generally speaking, yes. The token can expire in the event of password change, or if revoked by admins.
- Do you know if the tokens auto expire in the event of account disable? Going to assume so. But wondering if you have to go in and manually revoke tokens or not on an account termination, or what quickest way to assure lock out of data access.
They do not, but yeah you can revoke them as part of the "deprovisioning" workflow.
