I am hoping someone can answer a behavior question with SharePoint+ADFS/WAP. I can't find a definite answer but hopefully someone has the same environment as my client

My client has the following setup - Sharepoint 2013 on premise farm where users login internally via Kerberos i believe, basically no authentication prompts when on the network Externally, we have setup ADFS 3.0 + WAP, so that all requests externally go via the WAP server and forms based authentication prompts users to login (followed this article, http://www.brightstarr.com/sharepoint-technology-and-application-insights/securely-publishing-sharepoint-externally-using-web-application-proxy-part-2)

This works fine, logins work perfectly. However when opening any MS Office documents, word or excel, users are presented the same WAP login screen to authenticate again inside MS Office (2013 or 2016). Is the expected behaviour? I would have thought that some token would have passed through from the browser and the document could be opened with a single click

Hope someone can help



2 Answers 2


I ran into this as well for a client. It seems there is a hotfix for WAP. http://support.microsoft.com/kb/3020813

Install that, then run a PS command to set your time for "persistent cookies".

Get-WebApplicationProxyApplication yoursite.domain.com | Set-WebApplicationProxyApplication -PersistentAccessCookieExpirationTimeSec 3600


This is expected behavior as Office does not share the cookie/token with the browser (IE, Chrome, or Firefox).

  • Thanks Trevor, is there any way around this? Would having an office web apps server help in any way? Seems a bit pointless having Sharepoint setup in this way, adds more authentication prompts and users are not happy Jan 18, 2016 at 2:43
  • @ShaunJacob did you find out if OWA helped out with the login prompt issue? Feb 1, 2016 at 20:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.