Merge pull request #116585 from MicrosoftGuyJFlo/SignInFrequencyGA

[Azure AD] Conditional Access - Sign in frequency update from PM

Author: garycentric

articles/active-directory/conditional-access/concept-conditional-access-session.md

@@ -45,7 +45,7 @@ Conditional Access App Control enables user app access and sessions to be monito
 
 For more information, see the article [Deploy Conditional Access App Control for featured apps](/cloud-app-security/proxy-deployment-aad).
 
-## Sign-in frequency (Preview)
+## Sign-in frequency
 
 Sign-in frequency defines the time period before a user is asked to sign in again when attempting to access a resource.
 
@@ -63,7 +63,7 @@ Sign-in frequency setting works with apps that have implemented OAUTH2 or OIDC p
 
 For more information, see the article [Configure authentication session management with Conditional Access](howto-conditional-access-session-lifetime.md#user-sign-in-frequency).
 
-## Persistent browser session (Preview)
+## Persistent browser session
 
 A persistent browser session allows users to remain signed in after closing and reopening their browser window.
 

articles/active-directory/conditional-access/howto-conditional-access-session-lifetime.md

@@ -48,6 +48,10 @@ Sign-in frequency setting works with apps that have implemented OAUTH2 or OIDC p
 - Dynamics CRM Online
 - Azure portal
 
+### User sign-in frequency and multi-factor authentication
+
+Sign-in frequency previously applied to only to the first factor authentication on devices that were Azure AD joined, Hybrid Azure AD joined and Azure AD registered. There was no easy way for our customers to re-enforce multi factor authentication (MFA) on those devices. Based on customer feedback, sign-in frequency will apply for MFA as well.
+
 ### User sign-in frequency and device identities
 
 If you have Azure AD joined, hybrid Azure AD joined, or Azure AD registered devices, when a user unlocks their device or signs in interactively, this event will satisfy the sign in frequency policy as well. In the following 2 examples user sign-in frequency is set to 1 hour: