SharePoint 2016 with FBA credential prompts when opening Office documents

[Deleted]

Can someone, please, share their experience in solving the problem with Office applications prompting for credentials? We've got FBA and Windows authentication in the default zone. Everything works fine. FBA works perfectly, Windows authentication works. However, when we are trying to open a Word document - we are presented with a login login page. For the sake of the argument, let's say it's OOB Login page. But we also have a custom login page that behaves exactly the same. When clicking on any Word document (docx), we are prompted with the login page (see screenshot below). That is only half of the problem. The biggest problem is that even if we authenticate one more time, the login page pops up over and over. It does not matter if we login with FBA or Windows. We've tried all sorts of combinations. It just keeps prompting forever.

We can live with Word prompting us from time to time, but after entering credentials we are not logged in. Popup window never disappears. I want to reiterate that this is happening with the OOB login page as well.

More info

• If we download the Word document - it opens fine.
• We are accessing the SharePoint 2016 website via the Internet from the computers that are not joined to the SharePoint domain.
• We don't have ADFS or ISA
• The main SharePoint Zone has both Windows and FBA authentication
• We are using SharePoint FBA Pack from Codeplex
• We've got custom login page. But using OOB login page behaves the same way. We still get prompted over and over again when opening Word documents

Things I've tried

• Connected to the site using FBA and AD credentials
• Added site to the Local intranet and selected "Automatic log-on with current username and password"
• Tried multiple client computers
• Tried setting "Open in browser" and "Open in Client application"
• Clicked "Remember credentials"
• Enabled and disabled "Client integration"
• Disabled or enabled anonymous access
• Tried adding registry key AuthForwardServerList to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters
• Tried using custom or OOB login page
• Tried all browsers. They all behave same except for Firefox. It just openes the file in Word, but it's not connected to the website.
• Disabled or enabled "Site Lockdown"
• Tried adding < verbs applyToWebDAV="false" > < add verb="OPTIONS" allowed="false" /> <add verb="PROPFIND" allowed="false" /> </verbs> to web.config
• Restarted client computers

Any help will be greatly appreciated.

[#2]

Hi @Deleted,

Please check this article.

The only way to maintain direct-edit functionality and also not be prompted by the Office application is to implement a proxy/firewall server by using Forms Based Authentication together with persistent cookies. For example, you can use an Internet Security and Acceleration (ISA) server or a Forefront Threat Management Gateway.

---

I've just checked on one of the environments with 2016+FBA and experienced the same endless (3 times, then error) login prompt when opening an office document.

[#3]

I can confirm this behaviour!

Can you try setting SuppressModernAuthForOfficeClients setting of the SPSecurityTokenServiceConfig to $true? Seems like this is a starting point. After that, we could open documents the second time when not closing the Office application and edit them.