Forum Discussion
How to interpret non-interactive user sign-ins?
the user sign-in non-interactive is where the user for example refreshes a page for an app he accessed already, and the conditional access policy was already verified so no need to rechallenge him again and the status showed success.
- eliekarkafyMar 24, 2023MVP
Non-interactive user sign-ins are sign-ins that are performed by a client app or an OS component on behalf of a user. These sign-ins don't require any interaction or authentication factor from the user. For example, authentication and authorization using refresh and access tokens that don't require a user to enter credentials.
Below are some of the examples when non-interactive sign-in gets triggered,
• A client app uses an OAuth 2.0 refresh token to get an access token.
• A client uses an OAuth 2.0 authorization code to get an access token and refresh token.
• A user performs single sign-on (SSO) to a web or Windows app on an Azure AD joined PC.
• A user signs in to a second Microsoft Office app while they have a session on a mobile device using FOCI (Family of Client IDs).- KirilMar 24, 2023Steel ContributorThank you. The documentation https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-all-sign-ins#non-interactive-user-sign-ins says something similar, but I still can't wrap my head around it. For the specific case I outlined - what does that mean for the Application "Microsoft App Access Panel"?
- eliekarkafyMar 24, 2023MVP