Forum Discussion
Conditional Access Policy will not save "Validating Policy"
Tomnibus_MedOne Yes, it started working for me as well yesterday, with no intervention required.
In fact, I haven't even heard back from Microsoft Support yet, despite opening the case 6 days ago and sending a chasing email a day or two ago.
Hi, well the 90 days was something that just popped to mind so had to put it out there. As why it is not saving your settings I think it's better if I just link this for guidance.
https://dirteam.com/sander/2020/06/17/todo-move-from-the-allow-users-to-remember-multi-factor-authentication-on-devices-they-trust-option-to-conditional-access/
And for reference
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettingshttps://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime
- I read the two reference links before. From what your dirteam.com link suggests, they are advocating that the remember device is not to be used. But also suggests you can enable the session sign-in frequency along with MFA (mostly from the comments) but that isn't working for me. it won't enable it. But it sounds like unless i want to reduce it from 90 days, I don't need it.
- Hello again, sounds right to me as well as it’s basically about adjusting the default rolling window (90). But I would open up a support ticket with Microsoft anyway to get an answer as to why you cannot save your policy with a custom number. Perhaps something to do with the recent incident.