Managing Azure AD’s Keep Me Signed In (KMSI) Feature

%3CLINGO-SUB%20id%3D%22%5C%26quot%3Blingo-sub-3161167%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3EManaging%20Azure%20AD%E2%80%99s%20Keep%20Me%20Signed%20In%20(KMSI)%20Feature%26lt%3B%5C%2Flingo-sub%26gt%3B%3CLINGO-BODY%20id%3D%22%5C%26quot%3Blingo-body-3161167%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3E%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3EThe%20Azure%20AD%20Keep%20Me%20Signed%20In%20(KMSI)%20feature%20uses%20a%20persistent%20cookie%20to%20allow%20users%20close%20and%20reopen%20browser%20sessions%20without%20sign-ins.%20If%20you%20don%E2%80%99t%20want%20to%20use%20KMSI%2C%20you%20can%20update%20Azure%20AD%20company%20branding%20to%20remove%20the%20option.%20Users%20will%20then%20have%20to%20reauthenticate%20each%20time%20they%20start%20a%20browser%20session.%20The%20decision%20to%20disable%20or%20keep%20KMSI%20is%20highly%20tenant-specific%20and%20depends%20on%20how%20authentication%20happens.%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3E%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Foffice365itpros.com%2F2022%2F02%2F14%2Fazure-ad-keep-me-signed-in-kmsi%2F%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22%5C%26quot%3Bnofollow%20nofollow%20noopener%20noreferrer%22%20noopener%3D%22%22%20noreferrer%3D%22%22%3Ehttps%3A%2F%2Foffice365itpros.com%2F2022%2F02%2F14%2Fazure-ad-keep-me-signed-in-kmsi%2F%26lt%3B%5C%2FA%26gt%3B%26lt%3B%5C%2FP%26gt%3B%26lt%3B%5C%2Flingo-body%26gt%3B%3CLINGO-LABS%20id%3D%22%5C%26quot%3Blingo-labs-3161167%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3E%3CLINGO-LABEL%3EOffice%20365%26lt%3B%5C%2Flingo-label%26gt%3B%26lt%3B%5C%2Flingo-labs%26gt%3B%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3C%2FLINGO-SUB%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3161167%22%20slang%3D%22en-US%22%3EManaging%20Azure%20AD%E2%80%99s%20Keep%20Me%20Signed%20In%20(KMSI)%20Feature%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3161167%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20Azure%20AD%20Keep%20Me%20Signed%20In%20(KMSI)%20feature%20uses%20a%20persistent%20cookie%20to%20allow%20users%20close%20and%20reopen%20browser%20sessions%20without%20sign-ins.%20If%20you%20don%E2%80%99t%20want%20to%20use%20KMSI%2C%20you%20can%20update%20Azure%20AD%20company%20branding%20to%20remove%20the%20option.%20Users%20will%20then%20have%20to%20reauthenticate%20each%20time%20they%20start%20a%20browser%20session.%20The%20decision%20to%20disable%20or%20keep%20KMSI%20is%20highly%20tenant-specific%20and%20depends%20on%20how%20authentication%20happens.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Foffice365itpros.com%2F2022%2F02%2F14%2Fazure-ad-keep-me-signed-in-kmsi%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foffice365itpros.com%2F2022%2F02%2F14%2Fazure-ad-keep-me-signed-in-kmsi%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3161167%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
MVP

 

The Azure AD Keep Me Signed In (KMSI) feature uses a persistent cookie to allow users close and reopen browser sessions without sign-ins. If you don’t want to use KMSI, you can update Azure AD company branding to remove the option. Users will then have to reauthenticate each time they start a browser session. The decision to disable or keep KMSI is highly tenant-specific and depends on how authentication happens.

https://office365itpros.com/2022/02/14/azure-ad-keep-me-signed-in-kmsi/

0 Replies