Forum Discussion
Custom User Agent Strings
We are trying to get folks over to MS Edge Chromium, and we do leverage IE Compatibility XMLs for legacy sites that are still transitioning...This issue is we want to continue to leverage edge but with select MS Applications like ADFS, we need to inject a custom string so that it will force forms based auth...now I know you mentioned IE compatibility XML, yes we can put the adfs server in that however due to the engine flipping back and forth it looses the auth and identity so we have to put all sites for exchange online and other 365 sites in the IE XML which is not ideal as we lose features...I recognize this is an edge case (no pun intended) but I have been asking MS for some time (few years and cases) and have yet to get an answer on user agent strings future...ideally this could be also solved if the ADFS would allow a way to force select groups to forms based auth (again multiple cases and years)
MicrosoftRussell Meyer Sounds like it's been a while you've been chasing down these issues. Somethings that might help with authentication if you are moving over to Microsoft Edge and using IE mode is configuring neutral sites or using cookie sharing.
Here is some documentation:
- https://docs.microsoft.com/en-us/deployedge/edge-ie-mode-sitelist#configure-neutral-sites
- https://docs.microsoft.com/en-us/deployedge/edge-ie-mode-faq#incomplete-neutral-site-configurations
- https://docs.microsoft.com/en-us/deployedge/edge-ie-mode-add-guidance-cookieshare
And like I mentioned, if you need help with your issue the App Assure team https://aka.ms/AppAssure can help with your problem. 
-Kelly
- We leverage the neutral sites for a few web apps in similar situation where the token is generated on site 123.vendor.com and then goto 456.vendorportal.com
just seems like I am doing alot of work for something in IE we could easily control...let me see what I can do with cookies and adfs, but on the surface it appears I need to know the cookie name- well going through debug I think I have found something...but will take some time...I believe the tokens are userid,ohpauth,ohptoken
- so did the cookie thing and that worked! however there appears to be a delay when loading IE mode and user agent strings...I have a GPO that specifies the useragent string for IE...initial page load in IE tosses edge UserAgent info, but upon refresh it shows correct info...going to test canary and beta builds
- Kelly_Y
Russell Meyer Are you on v96? The team is tracking an issue starting in v96 involving IE mode and the wrong UA String. Other customers have mentioned after refreshing it fixes the UA string.
For a little background, it appears the introduction of the InternetExplorerIntegrationComplexNavDataTypes policy might be a factor. One work around suggested is disabling the InternetExplorerIntegrationComplexNavDataTypes policy (set to 0).
In case you are running into this issue, we can keep you updated about the fix they are working on.
-Kelly
- correct, v96...I submitted feedback last night...
