Microsoft Entra Private Access
Conditional AccessPrivate Access Sign In Every Time
In brief
The guidance now explains that administrators may allow access to private applications from non-Windows devices while skipping sign-in frequency requirements, using device platform conditions.
What Entra admins need to know
Review the guidance when configuring sign-in frequency policies for private applications and non-Windows devices.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Scope enforcement by operating system
Depending on your requirements, you may want to allow access to these private applications from non-Windows devices, skipping sign in frequency requirements. You can use Conditional Access device platform conditions to exclude non-Windows operating systems from policies that enforce sign-in every time.
Excluded platforms aren't subject to sign-in every time enforcement by those policies.
@@ -24,9 +24,7 @@ Sign-in every time (preview) is currently supported only with the Global Secure ## Scope enforcement by operating system -You can use Conditional Access [device platform conditions](~/identity/conditional-access/concept-conditional-access-conditions.md#device-platforms) to exclude non-Windows operating systems from policies that enforce sign-in every time.--Excluded platforms aren't subject to sign-in every time enforcement by those policies.+Depending on your requirements, you may want to allow access to these private applications from non-Windows devices, skipping sign in frequency requirements. You can use Conditional Access [device platform conditions](~/identity/conditional-access/concept-conditional-access-conditions.md#device-platforms) to exclude non-Windows operating systems from policies that enforce sign-in every time. <a name='reauthentication-window'></a>