Hello @Deleted and @Avi Vaid,
Another issue related to https://techcommunity.microsoft.com/t5/discussions/password-protection-for-profiles/m-p/1497836?search-action-id=218356426586&search-result-uid=1497836 which i'm struggling with:
From my experience browser profiles are always signedin after startup of Edge, even AAD work profiles.
If it is not forbidden by Conditional Access as described in https://techcommunity.microsoft.com/t5/enterprise/azure-ad-conditional-access-for-edge-profile-sign-in/m-p/1538339 to logon to Edge on untrusted devices it would be possible a user creates a work profile using his AAD credentials +MFA and suffer from SSO, for example when accessing office.com.
If the user doesn't log out from his work profile he will still be logged on after restart of Edge and still can suffer from SSO to office.com without re-authentication.
I couldn't find any information if there is some kind of timeout for re-authentication for a logged in browser profile which would help to limit the impact of the described scenario besides enabling conditional access rules (and for sure locking your screen whenever you leave your computer).
Could you help me out?
Edit: MS Edge on iOS seems to behave different to Edge on Win10. After signin into my work profile on iOS i still have to authenticate when accessing office.com. Maybe the SSO expirience is not fully supported there.
Best regards
Joe
