Idle session timeout policy for Microsoft 365

[mxtx23]

I need to clarify how this policy works. Based on the official statement (see below) and my research, it affects only users who access Microsoft 365 web apps from unmanaged devices. Users accessing web apps from managed devices (AD joined or registered) will not be affected. Is that correct? Would be nice to share your experience.

[#2]

https://docs.microsoft.com/en-us/microsoft-365/admin/manage/idle-session-timeout-web-apps?view=o365-...

[#3]

@mxtx23 

Not tested yet myself, but this blog post ties in with the MS Docs - not sure if you've seen it. Remains unclear to me though

https://techcommunity.microsoft.com/t5/microsoft-365-blog/announcing-the-general-availability-of-idl...

Perhaps @Namit Gupta could kindly clarify?

[#4]

@mxtx23 @HidMov Thank you for calling that out. 

Once you turn on the idle session timeout policy in M365 admin center, it applies to all device types (managed and unmanaged) if the other conditions around SSO or 'Stay signed in?' are met. For this policy to be triggered "only" on unmanaged devices, you will additionally need to configure a CA policy as described in the docs article. Hope this clarifies. 

We are in the process of updating our documentation to reflect this behavior. It will be updated in a few days.