Do you know how persistent your browser session is when a Conditional Access policy is active, in which the setting Persistent browser session is set to Never persistent?  I assumed that the browser session would never be persistent, like the setting says. Maybe I just thought to simple, as I’m not an authentication expert, but the answer seems to be; it depends. It depends on the authentication architecture of the web application, and on a setting in the browser. … Continue reading Why ‘Never persistent’ isn’t really never persistent: understanding browser sessions in Microsoft 365 Web Apps