Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

You are repeatedly prompted for credentials when you start Outlook 2007 that has a mailbox hosted by Exchange Online on a computer that is behind an ISA Server 2006 or ISA Server 2004 firewall


View products that this article applies to.

Microsoft Business Productivity Online Standard Suite

↑ Back to the top


Symptoms

Consider the following scenario:
  • You use a computer that is behind a Microsoft Internet Security and Acceleration (ISA) Server 2006 firewall or an ISA Server 2004 firewall.
  • The ISA Server-based computer has a Web listener that is pointed to https://widgets.microsoft.com.
  • The ISA Server-based computer requires all requests to be authenticated.
In this scenario, you can sign in to the single sign-on (SSO) client and access all functions successfully. However, when you start Outlook 2007 that has a mailbox hosted by Exchange Online, you are repeatedly prompted for credentials.

↑ Back to the top


Cause

This issue occurs because the ISA server has a Web listener and is listening for requests on https://widgets.microsoft.com. The Web listener requires all requests to be authenticated. All requests are redirected to an ISA forms-based authentication page. Or, integrated credentials are accepted if the client passes them. Outlook clearly passes integrated credentials. However, those credentials are for Microsoft Online, not for the local Active Directory. Therefore, the credentials are denied, and you are prompted for credentials again.

↑ Back to the top


Resolution

To resolve this issue, create an ISA publishing rule that has the following criteria:
  • Type: Deny rule
  • Path: /autodiscover/autodiscover.xml
  • Users: All Users
This new publishing rule means that the server should deny any request that comes in for the following path:
https://widgets.microsoft.com/autodiscover/autodiscover.xml
Note You have to put this rule at the top of the other Web publishing rules to make sure that the request does not go through.

↑ Back to the top


Keywords: kbtshoot, kbexpertiseinter, kbprb, kbnomt, KB957519

↑ Back to the top

Article Info
Article ID : 957519
Revision : 2
Created on : 3/23/2009
Published on : 3/23/2009
Exists online : False
Views : 57