New "Persistent" Login Feature with Office 365: MFA does not work anymore

Implemented

New "Persistent" Login Feature with Office 365: MFA does not work anymore

avatar

Hello
I was just curious to see what this new authentication options "Default, Persistent and Linked Account" are doing.
At the moment, I don't fully understand the purpose of them.
If I choose Default, everything works fine: I enabled Azure MFA and have to authenticate on logon
When I choose Persistent, the login works without entering any password or MFA token, which is very bad.
Is this working as designed or maybe a bug?

If it works as designed, is it possible to disable "Persistent" login?

Thank you very much.

All Comments (2)

avatar

Default : Create a new authentication token each time, keep it in memory only
Persistent : Take the saved token, if it does not exist, create one and save it
Linked Account : Takes a saved token from Windows (registry)

In all causes if the token is expired, creds + MFA will prompt to renew the token.

So this is "as designed"

As for disabling "Persistent" I will add a feature request for this.

Best regads,

Stéfane Lavergne

avatar

Hello,

The policy DisableAzureInteractivePersistentLogin will be included in version 2020.3.

Regards

Jonathan Del Signore