Authentication loop between and OWA in Exchange Server 2019 and 2016


When the "Reduce default 'referer' header granularity" feature is enabled within a browser, the post-authentication request sent to has a limited referrer header. Specifically, the URL path is removed. When this happens, the server skips setting six Authentication-related cookies. As a result, the user is sent back to the server to go through the Authentication flow again. The server sees that the user is logged in, and sends the user back to OWA, and the loop repeats until the server detects the loop and stops the flow.

Note The "Reduce default 'referer' header granularity" feature can be manually set by using the chrome://flags/#reduced-referrer-granularity page in Google Chrome or Microsoft Edge.


To fix this issue, install one of the following updates:

For Exchange Server 2019, install the Cumulative Update 5 for Exchange Server 2019 or a later cumulative update for Exchange Server 2019.​

For Exchange Server 2016, install the Cumulative Update 16 for Exchange Server 2016 or a later cumulative update for Exchange Server 2016.

Third-party information disclaimer
The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.


Learn about the  terminology that Microsoft uses to describe software updates.

Daha fazla yardıma mı ihtiyacınız var?

Yeteneklerinizi geliştirin
Eğitimleri keşfedin
Yeni özellikleri ilk olarak siz edinin
Microsoft Insider 'a katılın

Bu bilgi yardımcı oldu mu?

Geri bildiriminiz için teşekkür ederiz!

Geri bildiriminiz için teşekkürler! Office destek temsilcilerimizden biriyle görüşmeniz yararlı olabilir.