Exchange Server 2016 CU 15 - OWA Http Error 440 on Chrome !

Ygokkaya 

Hi,

I had the same problem.

I am using an ADFS-like authentication, which was redirecting to the identity provider to login.

The problem was that Chrome/Chromium/Edge have changed the default referrer-policy from no-referrer-when-downgrade to strict-origin-when-cross-origin.

You can read into the available settings here: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy

I added the Header

Referrer-Policy: no-referrer-when-downgrade

to the identity Server (in IIS as HTTP-Response Header), to get the browsers to use the old default behaviour.

This fixed the problem.

If you are using ADFS 2019 (or install the back port for 2016), you can add it by using the following PowerShell command on the ADFS Server:

Set-AdfsResponseHeaders -SetHeaderName "Referrer-Policy" -SetHeaderValue "no-referrer-when-downgrade"

(see https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/customize-http-security-headers-ad-fs for more information on this command and the pre-requirements)

Best regards,

Jan