2FA with Office 365 - idiot's guide?

[Sky-Knight]

Yeah you learn really quick the stock android / iOS mail apps really suck.

Use Outlook, OR if you have a power user on Android, suggest to them Nine Folders.

I will NOT use anything but Nine for myself anymore, best $10 I ever spent.

 

[trevm999]

Up to 3 months if you leave apps open.
https://cobweb.com/latest-news/how-often-will-you-be-prompted-for-mfa-in-outlook-for-office-365#:~:text=The Refresh token is valid,to 90 days in Outlook.

I don't think you have to leave the app open the whole time.

Also, I believe Outlook can now utilize the Primary Refresh Token. So, if the device is at least AD registered, they may never have to do MFA until a password reset, as long as they use the computer within a span of 14 days.