Question

Contoso allows users to access Microsoft 365 web apps from personal, unmanaged browsers. Security requires that on these unmanaged devices, users must re-authenticate every 4 hours and that the browser session must NOT stay signed in after the browser window is closed. Which Conditional Access session control configuration meets both requirements?

Accepted Answer

Configure Sign-in frequency to 4 hours and set Persistent browser session to 'Never persistent'.

Answer

Configure Sign-in frequency to 4 hours and set Persistent browser session to 'Always persistent'.

Answer

Enable Continuous access evaluation and set Persistent browser session to 'Never persistent'.

Answer

Configure Sign-in frequency to 'Every time' and leave Persistent browser session unconfigured.