RSA SecurID Integration with OWA Signout not allowed

[KhwajaZiaulHasa]

Hello,

I have configured Microsoft Exchange OWA Access with RSA SecurID. I have used IIS Web Agent 8.0.

Everything is working fine, but when a user clicks on signout a following message is displayed "To finish signing out, please close all open browser windows". The user is not allowed to signout.

I saw that this issue is fixed in IIS Web Agent 8.0 as per the "RSA Authentication Agent 8.0 for Web for IIS 7.5, 8.0, and 8.5 Web Server Release Notes" but I am facing this issue when trying to signout.

Can you please tell me, what could be the issue?

Thanks

Zia

[ChristopherSalv]

Are you referring to the following from the release notes for the 8.0 web agent?

AAIIS-1094. Logging out of Microsoft Exchange Server when single sign-on is configured returned a “404 File Not

Found” error. This issue has been fixed in version 8.0.

The logout behavior is expected behavior.

[KhwajaZiaulHasa]

Yes, I found out that it is not an issue from RSA's end, but from Microsoft Exchange. However can we integrate RSA SecurID with exchange using forms based authentication, so that this error doesn't even comes up.

Regards

Zia

[ChristopherSalv]

Hello Zia,

With the current build of 8.0 web agent I just ran a test.

Just doing two factor ( not SSO ) exchange 2013 lastest updates installed.

Log into ECP, logout link takes you back to the securID login page for ECP, same behavior for OWA

Exchange setting for ECP virtual directory Authentication is set to use forms based authentication.

For OWA virtual directory Authentication is set to use forms based, domain\username