The following steps can be used to notify users when their sign-in sessions are about to expire using Azure AD Conditional Access with Sign-in Frequency:
- Sign in to the Azure portal as an administrator.
- Navigate to Azure Active Directory > Conditional Access > New Policy.
- Give the policy a name and a description.
- Under Assignments, select the users or groups you want to apply the policy to.
- Under Session, select Sign-in Frequency as a condition.
- Choose a sign-in frequency based on your organization's needs.
- Under Access Controls, select Grant, and then choose the appropriate access control option.
- Under Session, select Notify the user when sessions are about to expire.
- Set a value for the notification time, such as 15 minutes before session expiry.
- Choose an Email templates or Edit a default template.
- Click Create to save the policy.
With this policy, users will receive an email notification 15 minutes before their sign-in session is due to expire, prompting them to sign in again to keep their session active. This helps prevent users from being unexpectedly signed out of applications or losing unsaved work.