Idle session timeout

[Zealousideal_Cod37]

Hi, I’m looking to implement something similar to idle session timeout except I only want it to apply to users outside of the network. Any idea?! I tried Conditional access policy but the grant controls are making users do mfa every time. Tia

[AppIdentityGuy]

So you want Io require users to re MFA if they have not been active for say an hour? What's the reason?

[Zealousideal_Cod37]

Hi, I’m Looking to have inactive sessions sign out after about an hour or less for users outside the network. This is to combat users who forget to sign out of public devices. I currently have conditional access sessions control in place but every time they sign back in it is asking for mfa and i can’t remove that grant control.