New "Persistent" Login Feature with Office 365: MFA does not work anymore
Hello
I was just curious to see what this new authentication options "Default, Persistent and Linked Account" are doing.
At the moment, I don't fully understand the purpose of them.
If I choose Default, everything works fine: I enabled Azure MFA and have to authenticate on logon
When I choose Persistent, the login works without entering any password or MFA token, which is very bad.
Is this working as designed or maybe a bug?
If it works as designed, is it possible to disable "Persistent" login?
Thank you very much.
Default : Create a new authentication token each time, keep it in memory only
Persistent : Take the saved token, if it does not exist, create one and save it
Linked Account : Takes a saved token from Windows (registry)
In all causes if the token is expired, creds + MFA will prompt to renew the token.
So this is "as designed"
As for disabling "Persistent" I will add a feature request for this.
Best regads,
Stéfane Lavergne
Hello,
The policy DisableAzureInteractivePersistentLogin will be included in version 2020.3.
Regards
Jonathan Del Signore