Microsoft Teams for the web will respect Microsoft Entra “Keep Me Signed In” (KMSI) settings
Microsoft Teams for the web will respect Microsoft Entra ID’s “Keep Me Signed In” (KMSI) settings starting late June 2026. Sessions will persist only if users choose to stay signed in; otherwise, sessions clear on browser close, enhancing security on shared devices. No immediate action is required. What and Why We are updating Microsoft Teams on the web to align with Microsoft Entra ID “Keep Me Signed In” (KMSI) behavior. This change improves security by ensuring that Teams web sessions respect users’ explicit sign-in preferences. If a user does not choose to remain signed in, Teams will no longer persist browser sessions, reducing the risk of unauthorized access on shared or unmanaged devices. Rollout Schedule General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out in late June 2026 and expect to complete by late July 2026. Impact on Your Organization Who is affected: All users accessing Microsoft Teams via a web browser Organizations with specific security or compliance requirements for session persistence Platforms/Services: Microsoft Teams (web) Microsoft Entra ID authentication experience What will happen: Teams web will respect the Microsoft Entra KMSI selection during sign-in. If users select “Yes” (stay signed in): Session behavior remains unchanged. Users stay signed in across browser sessions. If users select “No” or do not respond to KMSI: Local authentication tokens and cached session data are cleared when the browser closes. Users must sign in again in a new browser session. On managed devices: Users may be automatically authenticated using device credentials. The KMSI prompt may still appear unless suppressed by tenant settings or Conditional Access policies. Tenants using Seamless SSO or AD FS (Integrated Windows Authentication): Will continue to bypass the KMSI prompt. Sign-in persistence is controlled by the existing SSO configuration. This behavior is enabled by default and respects existing tenant configurations. Action Required / Recommendations No immediate action is required. However, we recommend the following: Review your Microsoft Entra ID KMSI configuration and user guidance. Inform users that Teams web sessions may no longer persist unless “Stay signed in” is selected. Evaluate Conditional Access policies or persistent browser session […]
The post Microsoft Teams for the web will respect Microsoft Entra “Keep Me Signed In” (KMSI) settings appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Microsoft Teams for the web will respect Microsoft Entra “Keep Me Signed In” (KMSI) settings
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft Entra ID: Risk-based anti-bot verification (CAPTCHA) for SMS and voice multi-factor authentication
Starting mid-November 2026, Microsoft Entra ID will add risk-based CAPTCHA verification for SMS and voice MFA to prevent automated fraud. Some...
[Outlook for iOS and Android] Copilot Chat in Outlook UX improvements
Copilot Chat in Outlook for iOS and Android is being updated with a refreshed, consistent design across Microsoft 365 apps, improved chat inte...
Microsoft Word: Retirement of legacy compatibility settings
Microsoft Word will retire legacy compatibility settings for documents in Compatibility Mode starting December 2026 (Windows) and early 2027 (...
Power Platform – Information regarding the end of support for SharePoint temporary authentication URLs
Starting April 1, 2027, SharePoint temporary authentication URLs will be retired. Power Apps and Automate functionality that relies on these U...
Windows Office Hours: November 19, 2026
If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live ...
Scheduled prompts in Microsoft 365 Copilot are moving to native Copilot scheduling and the Tasks view
Microsoft 365 Copilot is moving scheduled prompts from Power Platform to native Copilot scheduling, enabling automatic execution of one-time o...
Prevent issues with NetApp SMB shares: Learn about new Windows Server security requirements
Microsoft introduced additional security requirements for LDAP authentication on Active Directory domain controllers starting with the October...
60-day reminder: Hardening changes for ReFS volumes on removable media
Microsoft is making hardening changes to the Resilient File System (ReFS). The changes improve the security posture of Windows by adding visib...
Microsoft 365 Copilot: Copilot Workspaces is replacing standalone agent selection with agentic chat
Microsoft 365 Copilot Workspaces will replace standalone agent selection (Researcher, Analyst, Designer) with an agentic chat that applies ski...
Microsoft Teams: Updated recording and transcript access setting behavior for town halls and webinars
Microsoft Teams is updating the “Who has access to the recording or transcript” option for Events App town halls and webinars. It ...