Forum Discussion

louiscilo's avatar
louiscilo
Copper Contributor
Aug 22, 2023
Solved

Exchange 2013 hybrid upgrade to Exchange 2019 Hybrid, outlook keep prompting m365 login.

Hi,   I have Exchange 2013 with Hybrid Modern Auth enabled. I am planning to migrate to Exchange 2019 hybrid. Outlook is 2019.   Everything works fine in EXCH13 hybrid environment. However when i...
2013
2019
Exchange Server
hybrid
outlook
  • louiscilo's avatar
    louiscilo
    Sep 07, 2023
    Updated:
    It is fixed by running Set-AuthServer -RefreshAuthMetadata.
    Should be the cache issue, but still no idea why the metadata won't update by servers automatically.
LeonPavesic's avatar
LeonPavesic
Silver Contributor
Aug 22, 2023

Hi louiscilo,

The continuous M365 login prompts you're encountering can be resolved by following these steps:

  1. Check Autodiscover Configuration: Ensure that your Autodiscover DNS records are set up correctly and pointing to the right location. You can do this by verifying the Autodiscover URL settings in both Exchange 2013 and Exchange 2019 servers.

    Autodiscover service in Exchange Server | Microsoft Learn

  2. Certificate Configuration: Double-check your SSL certificate on the Exchange 2019 server. Make sure it covers all the required domains, including Autodiscover and Exchange services. If there's an issue with the certificate, it can lead to login prompts.

    [SOLVED] Exchange 2019 certificate verification (spiceworks.com)
    Import or install a certificate on an Exchange server | Microsoft Learn

  3. Review OAuth Configuration: Verify that Hybrid Modern Authentication (OAuth) is properly configured on both your Exchange 2013 and Exchange 2019 servers. This secure authentication method is important for seamless communication between on-premises and online services.

    Configure OAuth authentication between Exchange and Exchange Online | Microsoft Learn

  4. Authentication Methods and Protocols: Confirm that the authentication settings (like NTLM, Basic, and OAuth) match between your Exchange 2013 and Exchange 2019 servers. 

  5. Check URLs and SCP Records: Make sure the URLs you've configured in both versions of Exchange are accurate and consistent. Also, check the Service Connection Point (SCP) records in Active Directory to ensure they're pointing to the right Autodiscover service.

    Please click Mark as Best Response & Like if my post helped you to solve your issue.
    This will help others to find the correct solution easily. It also closes the item.


    If the post was useful in other ways, please consider giving it Like.


    Kindest regards,


    Leon Pavesic

Resources