Policy in office 365 to block users after a period of inactivity

[Stefanie Cortese]

I want to apply a policy that automatically blocks a user from sign in after a period of time.

I know I can see inactive user reports

I know how to manually block users

I know I can run a power shell script to find inactive users and block them

I am looking for a way to automatically block these users with out IT having to do something. 

[#2]

There is no policy built in to Office 365 that matches what you're describing (automatically block users from signing in after a specific period of inactivity). You could however create an Azure function or a scheduled task on a server to run a PowerShell script to find inactive users and block them on a regular basis. That would be my best approach to this.

I'd be curious to hear more about the use case for this though. Is this a security measure?

[#3]

Well we have a similar feature in SPO: https://techcommunity.microsoft.com/t5/Microsoft-SharePoint-Blog/Introducing-Idle-Session-Timeout-in...

But that will only trigger when the user is idling on a SPO site, not for any other O365 app.

[#4]

Thanks. It is for compliance. I don't let any users sit out there that long that are inactive or should be disabled. This requirement is to "check the box" that compliance is met. 

[#5]

That only expires the session though, not block/disable the user. I believe Stefanie was asking about blocking accounts. Could do configurable tokens in AAD (soon to be part of/replaced by Conditional Access) if we're just talking about session timeouts.

[#6]

@Stefanie Cortese 

Look into the below link, that might be helpful 

https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-manage-inactive-use...