Skip to content

Commit d17492f

Browse files
authored
Updating where KMSI settings can be found
The setting for whether user sees KMSI prompt or not used to be in "advanced brand settings" but now is in "user settings" in Azure Portal. Old: Show keep user signed in in advanced brand setting New: Show keep user signed in in user setting
1 parent 28ce363 commit d17492f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/active-directory/fundamentals/active-directory-users-profile-azure-portal.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -84,7 +84,7 @@ The **Stay signed in?** prompt appears after a user successfully signs in. This
8484

8585
The following diagram shows the user sign-in flow for a managed tenant and federated tenant using the KMSI in prompt. This flow contains smart logic so that the **Stay signed in?** option won't be displayed if the machine learning system detects a high-risk sign-in or a sign-in from a shared device.
8686

87-
KMSI is only available on the default custom branding. It can't be added to language-specific branding. Some features of SharePoint Online and Office 2010 depend on users being able to choose to remain signed in. If you uncheck the **Show option to remain signed in** option, your users may see other unexpected prompts during the sign-in process.
87+
KMSI setting is available in User settings. Some features of SharePoint Online and Office 2010 depend on users being able to choose to remain signed in. If you uncheck the **Show option to remain signed in** option, your users may see other unexpected prompts during the sign-in process.
8888

8989
![Diagram showing the user sign-in flow for a managed vs. federated tenant](media/customize-branding/kmsi-workflow.png)
9090

@@ -106,7 +106,7 @@ Details about the sign-in error are found in the **Sign-in logs** in Azure AD. S
106106
* **Sign in error code**: 50140
107107
* **Failure reason**: This error occurred due to "Keep me signed in" interrupt when the user was signing in.
108108

109-
You can stop users from seeing the interrupt by setting the **Show keep user signed in** setting to **No** in the user settings. This setting disables the KMSI prompt for all users in your Azure AD directory.
109+
You can stop users from seeing the interrupt by setting the **Show option to remain signed in** setting to **No** in the user settings. This setting disables the KMSI prompt for all users in your Azure AD directory.
110110

111111
You also can use the [persistent browser session controls in Conditional Access](../conditional-access/howto-conditional-access-session-lifetime.md) to prevent users from seeing the KMSI prompt. This option allows you to disable the KMSI prompt for a select group of users (such as the global administrators) without affecting sign-in behavior for everyone else in the directory.
112112

0 commit comments

Comments
 (0)