https://learn.microsoft.com/en-us/azure/active-directory/con...
Those “sessions which never expire” do, in fact, expire. It’s just that there’s more to it than time. The author should read up on the reasoning behind primary refresh tokens and session tokens.