Our Evo Credential Provider offers an option for an MFA Grace Period, basically to delay MFA. However, we would like to be clear on how the MFA Grace period works. This is designed and implemented for user lock out, not user log out. Locking your screen with a grace period active will allow you to unlock that screen and not have to MFA. However, if you log out, you will need to MFA regardless.

NOTE: The Grace Period takes into account the time between MFA's. If you set your MFA grace period to 5 minutes, but have been logged in (from an MFA) longer than this period, once you lock your screen, you will need to MFA again.

If the setting is at 0, there will be no grace period, and the user must MFA each time. Anything over 0 minutes, and the user will not need to MFA coming back from a locked screen as long as it's within the time frame.

If you have any questions or concerns, feel free to reach out to support@evosecurity.com