'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Set Microsoft 365 MFA Sign-In Frequency Beyond 90 Days
Question details
The user needs to configure their organization's MFA sign-in frequency to an interval longer than 90 days, but is restricted by the legacy settings page limit.
- Product
- Microsoft 365 / Microsoft Entra ID
- Device & OS
- not provided
- Scenario
- An administrator is attempting to update the organization's multi-factor authentication policies to require reauthentication less frequently.
- Observed behavior
- The legacy Microsoft Entra multifactor authentication page enforces a hard limit of 90 days and rejects any higher value, while the Conditional Access option is not immediately visible.
Verify that your administrative account has an eligible license, such as Microsoft 365 Business Premium or Microsoft Entra ID P1, to access the Conditional Access settings.
Configure Sign-In Frequency via Conditional Access
Use Microsoft Entra Conditional Access policies to bypass the legacy MFA page limitations and set custom sign-in frequency intervals like 180 days.
The legacy Microsoft Entra multifactor authentication page is limited to a maximum configurable MFA frequency of 90 days. To set longer sign-in intervals, organizations must transition to using Conditional Access sign-in frequency policies.
Accessing Conditional Access settings requires specific administrative permissions and a qualifying premium license. If you are experiencing conflicting values shown on the legacy page compared to your new policies, this is a known administrative-center issue that can be reported via the Microsoft feedback option.
Log in to the Microsoft Entra admin center using an account with Global Administrator or Conditional Access Administrator privileges.
In the left-hand navigation menu, click on 'Protection', then select 'Conditional Access', and choose 'Policies'.
Create a new policy or edit an existing one. Scroll down to find and select 'Session controls', then check the box for 'Sign-in frequency'.
Select 'Periodic reauthentication' from the dropdown menu and specify your required number of days (e.g., 180 days). Save and enable your policy.
Looking for a Hassle-Free Office Suite? Try WPS Office
Managing complex enterprise licenses and advanced admin centers like Microsoft Entra can be overwhelming. If your team simply needs a powerful, lightweight, and highly compatible alternative for daily document creation and editing, WPS Office is the perfect solution.
- 1. Download the Installer: Visit the official WPS Office website to download the free installation package.
- 2. Install the Software: Run the installer and follow the quick setup wizard to complete the installation.
- 3. Open Your Documents: Launch WPS Office and instantly open your existing Microsoft Word, Excel, or PowerPoint files without losing formatting.
Frequently Asked Questions
Why is the Conditional Access option missing in my Microsoft Entra admin center?
Conditional Access is a premium feature. If you do not see it under the Protection menu, your tenant may not have an eligible license, such as Microsoft Entra ID P1/P2 or Microsoft 365 Business Premium.
Can I set the MFA frequency above 90 days directly on the legacy settings page?
No, the legacy Microsoft Entra multifactor authentication page has a hard-coded limit of 90 days. You must utilize Conditional Access policies to configure longer sign-in intervals.
Do I need to convert all user licenses to Business Premium to change the MFA frequency?
Usually, assigning a Microsoft 365 Business Premium or Microsoft Entra ID P1 license to the administrator account allows access to configure the Conditional Access settings, though you should verify Microsoft's licensing compliance terms regarding policy application across your users.
