This message was deleted.

I had this - had to use conditional access to slap sign in frequency from memory

Cheers, Jimmy lad. I discussed that with them and sent details.. I'll check what they have setup up. Im keen to understand if I can stop the password being cached on the client. I believe there is a session profile setting but it throws a pop-up at logoff which id rather not have, cheers

@John Gallacher, but does that require GW plugin or EPA? ... can't see that happening else. Also, from the browser perspective it's storing the credentials "outside of" the ADCs reach? So, the browser stores the credentials for login.microsoftonline.com rather than for mygateway.company.com?

Hey, this didn't really work as expected. In the end we made a new conditional access policy with a 1 hour timeout... the customer has accepted that. I believe 10 min timeouts are coming soon, cheers