This message was deleted.

I've been questioned about this too John. Security not happy about company devices basically SSO'ing in through an external gateway. I never found a way, I said; it's by design. Obviously nothing to do with the gateway as such.

Have you set this policy globally? I‘ve configured this just for the Azure App for Gateway auth. Set the sign in frequency to 1 hour. This will work

Yes, you can do that but within that time its still cached. My client wanted to force auth every single time.

Yep, thats the issue. I think 1 hour is the lowest... they want it to ALWAYS fire.. 😞

😕

they are fine with this for AD joined/registred endpoint but want zero caching/allowance for BYOD/unmanaged devices...

That's the correct expression ;-)

Looking at this... setting to 10 minutes and disabling browser persistence would harden it further if I'm thinking straight... thoughts folks?

Yeah, I didn't attempt to move forwards with it because I essentially couldn't do what was asked.

Cool... I think that 10 min option is still in preview. I'll keep you posted if I get any wins 🙂