Forum Discussion

Brass Contributor

Mar 17, 2021

Solved

Conditional Access Policy will not save "Validating Policy"

I have a conditional access policy to enable MFA. It's all set and good. I have it shown here. I later wanted to go into "Session" and enable "Sign-In Frequency" and set it to the recommended...

Azure Active Directory (AAD)

snout
Mar 24, 2021
Tomnibus_MedOne Yes, it started working for me as well yesterday, with no intervention required.

In fact, I haven't even heard back from Microsoft Support yet, despite opening the case 6 days ago and sending a chasing email a day or two ago.

ChristianBergstrom

Silver Contributor

Mar 17, 2021

Hello, the Azure AD default configuration for user sign-in frequency is 90 days, which should explain what you're experiencing (can not save something that is already set).

Tomnibus_MedOne

Brass Contributor

Mar 17, 2021

ChristianBergstrom

So, when using MFA, how do I get it to add the prompt "Remember this device for X days" option? Because under "Remember multi-factor authentication on trusted device" setting it tells me to use Conditional Access:

NOTE: For the optimal user experience, we recommend using Conditional Access sign-in frequency to extend session lifetimes on trusted devices, locations, or low-risk sessions as an alternative to ‘Remember MFA on a trusted device’ settings. If using 'Remember MFA on a trusted device,' be sure to extend the duration to 90 or more days. Learn more about reauthentication prompts.

So, I should enable it in trusted device? Or require MFA with each login when outside my network?