Forum Discussion

anand_s's avatar
anand_s
Copper Contributor
Jan 10, 2019
Solved

Is it possible to use Azure AD without internet

Hello Experts Mine is more of a business user kind of question and not from a technical question. We want to use some Access and Identity management system for our company (about 50 users and using ...
azure active directory
  • Bert Wolters's avatar
    Bert Wolters
    Jan 10, 2019
    Hi Anand, By design this should work with cached credentials, so once a machine is Azure AD joined and the user on the device successfully logged on to the device, you could disable the network connection and logon again. Even without a connection to Azure AD.
Bert Wolters's avatar
Bert Wolters
MVP
Jan 10, 2019
Hi Anand, By design this should work with cached credentials, so once a machine is Azure AD joined and the user on the device successfully logged on to the device, you could disable the network connection and logon again. Even without a connection to Azure AD.
anand_s's avatar
anand_s
Copper Contributor
Jan 10, 2019

Thanks a lot Bert for your quick reply. One more question, when we delete the user in AD Azure, the user is still able to login using the old credentials. The user is connected to internet and we believe the event of deleting the user has not synced/broadcast-ed. Any thoughts on this?

 

Thanks

Anand

  • Vinoth_Azure's avatar
    Vinoth_Azure
    Iron Contributor
    Jan 11, 2019
    I am sure that you can't able login after federation service (AD-FS between Azure AD and Domain Joined Computer through internet) connectivity restored between Azure AD with domain joined computer.

    Thanks
    Vinoth K
    • rabartek's avatar
      rabartek
      Copper Contributor
      Nov 23, 2022

      Vinoth_Azure 

      Hello,

      I have a little bit similar question. I have AAD joined device, on-prem(ADDS) user synced to AAD and ADFS. Question(I cannot find answer), how it is working in the situation: User is signed to the computer, he turn off the computer and travel to holiday. When he starts the computer (14 days later) on the hotel (without internet connection) is he able to log in to Windows? Is there any exact time for credential caching - how long can computer keep the user credentials (authenticated over ADFS) keep for user login?

      Thank you for answers or ideas..

      • Vinoth_Azure's avatar
        Vinoth_Azure
        Iron Contributor
        Jun 06, 2023
        Yes, the user will be able to log in to Windows 14 days later on the hotel (without internet connection) if the device is Azure AD joined and the user is synced to Azure AD and ADFS. The user's credentials will be cached on the device for up to 14 days, so they will be able to log in without an internet connection.

        Here is how it works:

        When the user signs in to the device, their credentials are cached on the device.

        The device then connects to Azure AD and authenticates the user's credentials.

        Azure AD then sends a token back to the device, which the device uses to authenticate the user for the next 14 days.

        If the user's device is not connected to the internet for more than 14 days, the user will not be able to log in without re-entering their credentials.

        Here are some additional things to keep in mind:

        The 14-day credential caching period is the default value. You can change this value in Azure AD by going to Settings > Devices > Conditional Access > Session control > Maximum session age.

        If the user's device is lost or stolen, you can revoke the user's access to Azure AD by going to Users > Active users > select the user > Manage > Revoke access.

        You can also configure Azure AD to require users to re-enter their credentials every time they sign in. This can be done by going to Settings > Devices > Conditional Access > Session control > Sign-in frequency.

Resources