Microsoft Edge does not sign out of OWA

[HamishLimbrick1]

Hi, when our users access Exchange 2013 Outlook Web Access (OWA) using the Microsoft Edge browser built-in to Windows 10 they are unable to sign out.

If they choose 'Signout' from OWA's menu, a message appears stating that they need to close the browser to complete signout. However, even if they close all visible Edge browsers, they can still access OWA without signing in again - Edge is caching the authentication.

We have tried deleting all cookies and browser cache but the user is still not signed out.

Is this a bug? It seems like a massive security issue. Is there anything we can configure (perhaps in IIS) to stop this behaviour?

Note: when our users access OWA using Firefox, the signout behaviour is normal (after they close the browser they must reauthenticate to access OWA).

[HamishLimbrick1]

After I submitted this question I saw another question that seems to hint at what the problem could be. Although we are using the latest build on the Authentication Manager server, we may be uisng an older build of the Web Agent on the Exchange server.

'Add/remove progams' shows that version 8.0.0.399 of the Web Agent is intalled. Is there a later build than this?

[LyndalK]

Hi Hamish,

  refer the RSA® Authentication Agent for Web: IIS page on RSA Link.  It shows the latest version is v8.0.2 which includes support for Outlook Web App on Microsoft Exchange Server 2013 SP1 on Windows Server 2008 R2 SP1, Windows
Server 2012, and Windows Server 2012 R2.  Whichever version you are considering, make sure you read the Installation and Configuration Guide for that version shown on that page.  In the Guide, read chapter "Preparing for Installation" which lists the supported Microsoft applications, web browsers, hardware and OS requirements, etc.

regards

Lyndal Kanagasabai

[HamishLimbrick1]

Thanks for your response Lyndal. I have now got the v8.0.2 version and will try deploying it.