Microsoft Edge does not sign out of OWA
Hi, when our users access Exchange 2013 Outlook Web Access (OWA) using the Microsoft Edge browser built-in to Windows 10 they are unable to sign out.
If they choose 'Signout' from OWA's menu, a message appears stating that they need to close the browser to complete signout. However, even if they close all visible Edge browsers, they can still access OWA without signing in again - Edge is caching the authentication.
We have tried deleting all cookies and browser cache but the user is still not signed out.
Is this a bug? It seems like a massive security issue. Is there anything we can configure (perhaps in IIS) to stop this behaviour?
Note: when our users access OWA using Firefox, the signout behaviour is normal (after they close the browser they must reauthenticate to access OWA).
- Auth Agent
- Authentication Agent
- Community Thread
- Forum Thread
- RSA SecurID
- RSA SecurID Access
After I submitted this question I saw another question that seems to hint at what the problem could be. Although we are using the latest build on the Authentication Manager server, we may be uisng an older build of the Web Agent on the Exchange server.
'Add/remove progams' shows that version 188.8.131.529 of the Web Agent is intalled. Is there a later build than this?
refer the RSA® Authentication Agent for Web: IIS page on RSA Link. It shows the latest version is v8.0.2 which includes support for Outlook Web App on Microsoft Exchange Server 2013 SP1 on Windows Server 2008 R2 SP1, Windows
Server 2012, and Windows Server 2012 R2. Whichever version you are considering, make sure you read the Installation and Configuration Guide for that version shown on that page. In the Guide, read chapter "Preparing for Installation" which lists the supported Microsoft applications, web browsers, hardware and OS requirements, etc.