Sign-in frequency / MFA Staff Users / Conditional Access Policies

[kennysarmy]

Our MFA policy for staff includes a sign-in frequency (when off site) to M365 of every 6 hours.

 

I've been challenged that this is too frequent and wondered what others might have set?

 

Cheers

 

[synaesthesia]

For off site, I'd question why 6 hours is going to be difficult unless they are constantly working more than that?

For the majority surely, there would be no effective difference between every 6 hours and every 12 or even 24.

[kennysarmy]

I don't think it takes too long to resign in and it protects us from staff using personal "shared" home computers if they don't sign out before someone else uses it.

Perhaps 12 hours would at least allow someone to work all day and only sign in once...

 

I'm just loathe to effectively make the system less secure.