| title | conditionalAccessSessionControls resource type |
|---|---|
| description | Represents a complex type of session controls that is enforced after sign-in. |
| ms.localizationpriority | medium |
| author | lisaychuang |
| ms.reviewer | conditionalaccesspm |
| ms.subservice | entra-sign-in |
| doc_type | resourcePageType |
| ms.date | 04/01/2025 |
Namespace: microsoft.graph
[!INCLUDE beta-disclaimer]
Represents session controls that are enforced after sign-in. All the session controls inherit from conditionalAccessSessionControl.
| Property | Type | Description |
|---|---|---|
| applicationEnforcedRestrictions | applicationEnforcedRestrictionsSessionControl | Session control to enforce application restrictions. Only Exchange Online and Sharepoint Online support this session control. |
| cloudAppSecurity | cloudAppSecuritySessionControl | Session control to apply cloud app security. |
| continuousAccessEvaluation | continuousAccessEvaluationSessionControl | Session control for continuous access evaluation settings. |
| disableResilienceDefaults | Boolean | Session control that determines whether it's acceptable for Microsoft Entra ID to extend existing sessions based on information collected prior to an outage or not. |
| persistentBrowser | persistentBrowserSessionControl | Session control to define whether to persist cookies or not. All apps should be selected for this session control to work correctly. |
| secureSignInSession | secureSignInSessionControl | Session control to require sign in sessions to be bound to a device. |
| signInFrequency | signInFrequencySessionControl | Session control to enforce signin frequency. |
| globalSecureAccessFilteringProfile | globalSecureAccessFilteringProfileSessionControl | Session control to link to Global Secure Access security profiles or filtering profiles. |
None.
The following JSON representation shows the resource type.
{
"applicationEnforcedRestrictions": {"@odata.type": "microsoft.graph.applicationEnforcedRestrictionsSessionControl"},
"cloudAppSecurity": {"@odata.type": "microsoft.graph.cloudAppSecuritySessionControl"},
"continuousAccessEvaluation": {"@odata.type": "microsoft.graph.continuousAccessEvaluationSessionControl"},
"persistentBrowser": {"@odata.type": "microsoft.graph.persistentBrowserSessionControl"},
"signInFrequency": {"@odata.type": "microsoft.graph.signInFrequencySessionControl"},
"disableResilienceDefaults": false,
"secureSignInSession": {"@odata.type": "microsoft.graph.secureSignInSessionControl"},
"globalSecureAccessFilteringProfile": {"@odata.type": "microsoft.graph.globalSecureAccessFilteringProfileSessionControl"}
}