SOLVED

IE Mode Redirect Loop - SharePoint Online

%3CLINGO-SUB%20id%3D%22lingo-sub-1167788%22%20slang%3D%22en-US%22%3EIE%20Mode%20Redirect%20Loop%20-%20SharePoint%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1167788%22%20slang%3D%22en-US%22%3E%3CP%20data-unlink%3D%22true%22%3EOur%20SharePoint%20Online%20sites%20feature%20lots%20of%20links%20to%20our%20local%20network%20file%20system%20(file%3A%2F%2F)%2C%20which%20new%20Edge%20blocks%20access%20to.%20(I%20understand%20the%20security%20concerns%20there.)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%20data-unlink%3D%22true%22%3ESome%20online%20searching%20showed%20that%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployedge%2Fedge-ie-mode%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EIE%20Mode%3C%2FA%3E%20might%20be%20a%20solution%20to%20get%20file%3A%2F%2F%26nbsp%3Blinks%20working%20in%20Edge%2C%20so%20I%20configured%20Edge%20for%20%22Internet%20Explorer%20mode%22%20(i.e.%2C%20so%20it%20does%20not%20open%20a%20separate%20IE11%20window)%20and%20added%20our%20SharePoint%20Online%20domain%20to%20the%20Enterprise%20Mode%20Site%20List.%3C%2FP%3E%3CP%20data-unlink%3D%22true%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20data-unlink%3D%22true%22%3EHowever%2C%20when%20I%20try%20to%20navigate%20to%20the%20SharePoint%20page%20in%20Edge%2C%20I%20end%20up%20in%20a%20redirect%20loop.%20The%20SharePoint%20URL%20redirects%20to%20the%20login.microsoftonline.com%20URL%20for%20authentication%2C%20where%20it%20refreshes%20several%20times%20before%20bringing%20me%20to%20the%20login%20screen%20saying%2C%20%22We%20could%20not%20sign%20you%20in.%20Please%20try%20again.%22%3C%2FP%3E%3CP%20data-unlink%3D%22true%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20data-unlink%3D%22true%22%3EMy%20hunch%20is%20that%20the%20SharePoint%20URL%20(IE%20mode)%20is%20redirecting%20to%20the%20MSOnline%20Login%20URL%20(Edge%20mode)%2C%20which%20is%20then%20redirecting%20back%20to%20SharePoint%20(IE%20mode)%2C%20which%20isn't%20accepting%20the%20tokens%2C%20etc.%2C%20so%20it%20redirects%20back%20to%20the%20Login%20URL%20(Edge%20mode)%2C%20back%20and%20forth.%3C%2FP%3E%3CP%20data-unlink%3D%22true%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20data-unlink%3D%22true%22%3EIs%20there%20a%20way%20to%20make%20this%20work%3F%20I%20don't%20want%20to%20add%20the%20login.microsoftonline.com%20URL%20to%20IE%20mode%20because%20we%20have%20a%20lot%20of%20other%20services%20that%20don't%20need%20IE%20mode.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1169333%22%20slang%3D%22en-US%22%3ERe%3A%20IE%20Mode%20Redirect%20Loop%20-%20SharePoint%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1169333%22%20slang%3D%22en-US%22%3E%3CP%3EI%20resolved%20this%20issue.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20had%20scrolled%20down%20in%20the%20IE%20Mode%20doc%2C%20I%20would%20have%20seen%3A%3C%2FP%3E%3CH3%20id%3D%22toc-hId-1087306906%22%20id%3D%22toc-hId-1087306906%22%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployedge%2Fedge-ie-mode%23i-am-trying-to-go-to-a-site-in-ie-mode-and-it-appears-to-be-stuck-navigating-in-a-loop-or-tells-me-that-im-not-authenticated-whats-happening%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EI%20am%20trying%20to%20go%20to%20a%20site%20in%20IE%20mode%2C%20and%20it%20appears%20to%20be%20stuck%20navigating%20in%20a%20loop%20or%20tells%20me%20that%20I%E2%80%99m%20not%20authenticated.%20What's%20happening%3F%3C%2FA%3E%3C%2FH3%3E%3CP%20class%3D%22lia-indent-padding-left-30px%22%3EThis%20is%20probably%20happening%20because%20the%20site%20you%20are%20trying%20to%20reach%20is%20redirecting%20to%20an%20authentication%20server%20that's%20not%20configured%20to%20open%20in%20IE%20mode.%20You%20can%20try%20opening%20the%20site%20in%20standalone%20IE11%20with%20Developer%20Tools%20open%20to%20see%20the%20identity%20of%20the%20authentication%20server.%3C%2FP%3E%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22lia-indent-padding-left-30px%22%3EThe%20solution%20is%20to%20configure%20the%20authentication%20server%20in%20your%20Enterprise%20site%20list%20as%20%E2%80%9Cneutral%E2%80%9D.%20You%20can%20do%20this%20using%20the%20Enterprise%20Mode%20Site%20List%20Manager%20or%20directly%20in%20the%20sitelist%20XML.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20had%20to%20use%20developer%20tools%20(network%20pane)%20to%20see%20where%20the%20redirects%20were%20happening.%20For%20Microsoft%20Online%2C%20the%20domains%20I%20added%20to%20the%20Enterprise%20Mode%20Site%20List%20as%20neutral%20were%3A%3C%2FP%3E%3CUL%3E%3CLI%3Elogin.microsoftonline.com%3C%2FLI%3E%3CLI%3Elogin.windows.net%3C%2FLI%3E%3CLI%3E%3CMY%20adfs%3D%22%22%20domain%3D%22%22%3E%20(just%20in%20case)%3C%2FMY%3E%3C%2FLI%3E%3C%2FUL%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Our SharePoint Online sites feature lots of links to our local network file system (file://), which new Edge blocks access to. (I understand the security concerns there.)

 

Some online searching showed that IE Mode might be a solution to get file:// links working in Edge, so I configured Edge for "Internet Explorer mode" (i.e., so it does not open a separate IE11 window) and added our SharePoint Online domain to the Enterprise Mode Site List.

 

However, when I try to navigate to the SharePoint page in Edge, I end up in a redirect loop. The SharePoint URL redirects to the login.microsoftonline.com URL for authentication, where it refreshes several times before bringing me to the login screen saying, "We could not sign you in. Please try again."

 

My hunch is that the SharePoint URL (IE mode) is redirecting to the MSOnline Login URL (Edge mode), which is then redirecting back to SharePoint (IE mode), which isn't accepting the tokens, etc., so it redirects back to the Login URL (Edge mode), back and forth.

 

Is there a way to make this work? I don't want to add the login.microsoftonline.com URL to IE mode because we have a lot of other services that don't need IE mode.

1 Reply
Highlighted
Best Response confirmed by Andrew Colombino (Occasional Contributor)
Solution

I resolved this issue.

 

If I had scrolled down in the IE Mode doc, I would have seen:

I am trying to go to a site in IE mode, and it appears to be stuck navigating in a loop or tells me ...

This is probably happening because the site you are trying to reach is redirecting to an authentication server that's not configured to open in IE mode. You can try opening the site in standalone IE11 with Developer Tools open to see the identity of the authentication server.

 

The solution is to configure the authentication server in your Enterprise site list as “neutral”. You can do this using the Enterprise Mode Site List Manager or directly in the sitelist XML.

 

I had to use developer tools (network pane) to see where the redirects were happening. For Microsoft Online, the domains I added to the Enterprise Mode Site List as neutral were:

  • login.microsoftonline.com
  • login.windows.net
  • <my ADFS domain> (just in case)