Dear Everyone,
We're facing an authentication error with most of our users described below: Our SharePoint environment(2016) is integrated with ADFS(3.0) using DUO authentication. I noticed that this error occurs when user uses any browser except Internet Explorer - that means, this issue occurs in Chrome, Chromium (Edge), Firefox. Most importantly, once the user logged in using IE browser, then after all other browsers works without any issues.At the same time, when user logged off from IE browser, then all other browsers stopped working and throws the below error when we open documents from SharePoint site. And Also, we found out that,this error happens only to the users who has DUO enabled.If the user does not have DUO enabled, then they can open the office documents and also edit the documents on SharePoint to save it directly using any browsers without any issues.
1) User opens Intranet site and authenticates using our domain credentials.
2) User tries to open office document, for example Word document.
3) Word application opens up and ADFS asks for credentials.
4) After entering domain credentials, office application (Word) returns an error message:
I tried multiple following ways for solution which helped us nothing ☹
1) Client-side: Ensure that intranet site is in Trusted Sites zone or Local Intranet security zone in IE browser Options.
2) Client-side: Put intranet site into Trusted Locations in Office Trust Center settings.
3) Server-side: Check the config of SharePoint SPSecurityTokenServiceConfig
4) Client-side: Check the registry entry:
- HKCU\SOFTWARE\Microsoft\Office\16.0\Common\Identity
- Check if EnableADAL key is present
- If not present then create new REG_DWORD key with name EnableADAL and value 0
Further, I investigated the supported user agents configured in ADFS and I noticed that our current configuration is as follows:
As a result, we don't support Mozilla agent. The following article explains how to configure Chrome, Firefox and Chromium (Mozilla agent) for SSO in ADFS:
Which was also not working ☹. It would be really appreciated if you could give me any solutions, Thanks very much.