After migration from sp2013 to new sp2016 server farm we have problems with office client integration.
on sp2013 farm, if there was no persistant cookie written from IE, the client application redirected to the adfs sign in page and did an auth for the office client application.
on the new sp2016 farm, a windows authentication prompt pops up.
ULS Log from sp2013 server gives me the correct behavior:
OPTION call to the Document with an 403 FORBIDDEN => goes to 302 adfs login redirect
ULS Log from the sp2016 gives me a strange behavior:
OPTION call to the document with 403 FORBIDDEN => After that: END OF CALL
strange: fiddler doesnt show me the 403... he shows me 401 access denied...
stranger: the windows authentication prompt shows the url of the portal and not of the adfs sign in page. The authentication prompt doesnt acceppt any credentials, which I pass into it => makes sense, because there is no NTLM or Basic auth configured on this zone.
The settings are the same on both farms (sp2013/sp2016)... https, LDAPCP, same ADFS, same office online server
I want to force sharepoint open the adfs sign in page for login :/ not windows auth prompt
ULS from non working farm:
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Logging Correlation Data xmnv Medium Name=Request (OPTIONS:https://[url_of_my_portal]) be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwhz Medium SPRequestModule.BeginRequestHandler End be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC Web Content Management Publishing aytib Medium ObjectCachePerRequest Global:True, Enabled:False be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Application Authentication bjvyg Medium SPApplicationAuthenticationModule: Clear outgoing token context from SpThreadContext be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwh6 Medium SPRequestModule.PostAuthenticateRequestHandler Begin be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Authentication Authorization agb9s Medium Non-OAuth request. IsAuthenticated=False, UserIdentityName=, ClaimsCount=0 be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Runtime ajd6k Medium Value for isAnonymousAllowed is : True be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Runtime ajd6l Medium Value for checkAuthenticationCookie is : False be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwh7 Medium SPRequestModule.PostAuthenticateRequestHandler End be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwh8 Medium SPRequestModule.PostAuthorizeRequestHandler Begin be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwh0 Medium SPRequestModule.PostResolveRequestCacheHandler Begin be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwh1 Medium SPRequestModule.PostResolveRequestCacheHandler End be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime aj1kn Medium SPRequestModule.AcquireRequestStateHandler be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwh2 Medium SPRequestModule.PostAcquireRequestStateHandler Begin be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwh3 Medium SPRequestModule.PostAcquireRequestStateHandler End be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwhu Medium SPRequestModule.PreRequestExecuteAppHandler Begin be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Claims Authentication airze Verbose Current identity context: '{"anonymous":"true","nameid":"@","userId":"@"}' be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Claims Authentication anvuv Medium Context has no SMTP/UPN claims. IdentityContext: '{"anonymous":"true","nameid":"@","userId":"@"}' be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x23FC SharePoint Foundation Asp Runtime avwhv Medium SPRequestModule.PreRequestExecuteAppHandler End be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x0EE8 SharePoint Foundation General af71 Medium HTTP Request method: OPTIONS be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x0EE8 SharePoint Foundation General af75 Medium Overridden HTTP request method: OPTIONS be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x0EE8 SharePoint Foundation General af74 Medium HTTP request URL: https://[url_of_my_portal] be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x0EE8 SharePoint Foundation General a08yd Medium Getting content database b0a853e3-6682-4ddb-a267-988b92539eaf from webApp 47db0ff9-ccf4-4518-9831-3b91e1f8bf8f version 2928535. be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x0EE8 SharePoint Foundation Runtime an85c Medium recordStatus called with status(0x001E0002): Access Denied. be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Asp Runtime avwia Medium SPRequestModule.PostLogRequestHandler Begin be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Asp Runtime avwib Medium SPRequestModule.PostLogRequestHandler End be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Asp Runtime avwic Medium SPRequestModule.EndRequestHandler Begin be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Runtime ftc9 Medium Access Denied: PreSendRequestHeaders, insufficient permission. be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Site Cache az4z8 Medium Looking up SPSite by ID 64da4339-0bc1-4970-b4bf-3510105f867a in memory. be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Flighting Infrastructure awjmz Medium Using legacy MSO-FBA header. be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Site Cache az4z8 Medium Looking up SPSite by ID 64da4339-0bc1-4970-b4bf-3510105f867a in memory. be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation General b6p2 Medium Sending HTTP response 403 - text/plain:403 FORBIDDEN. be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.03 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Runtime aigd0 Medium An Exception occurred when setting the headers in PreSendRequestHeaders. This is error is ignorable in most cases. Error: System.Threading.ThreadAbortException: Thread was being aborted. at System.Threading.Thread.AbortInternal() at System.Threading.Thread.Abort(Object stateInfo) at System.Web.HttpResponse.AbortCurrentThread() at Microsoft.SharePoint.Utilities.SPUtilityInternal.SendResponse(HttpContext context, Int32 code, String strBody, String strContentType, Dictionary`2 headers) at Microsoft.SharePoint.Utilities.SPUtilityInternal.Send403(HttpContext context) at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(HttpContext context) at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.PreSendRequestHeaders(Object oSender, EventArgs ea) be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.04 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Monitoring b4ly Medium Leaving Monitored Scope: (Request (OPTIONS:https://[url_of_my_portal])) Execution Time=9.0951; CPU Milliseconds=4; SQL Query Count=0; Parent=None be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.04 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Asp Runtime avwid Medium SPRequestModule.EndRequestHandler End be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.04 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Application Authentication arftr Medium SPApplicationAuthenticationModule.IsBearerChallengeRequested: Return 'True'. be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.04 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Claims Authentication ah26c Verbose SPOAuthHttpChallenge: Setting WWW-Authenticate header to:Bearer realm="87d64469-386e-4b12-bfc2-a405b44ca0e2",client_id="00000003-0000-0ff1-ce00-000000000000",trusted_issuers="00000005-0000-0000-c000-000000000000@*,5148fd17-f9b2-4739-aa9d-462fedfcba7c@87d64469-386e-4b12-bfc2-a405b44ca0e2,00000003-0000-0ff1-ce00-000000000000@87d64469-386e-4b12-bfc2-a405b44ca0e2",cookie_uri="https://[url_of_my_portal]/_api/SP.OAuth.NativeClient/Authenticate" be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.04 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Claims Authentication a1dea Medium SPOAuthHttpChallenge: Adding OAuth WWW-Authenticate challenge without clearing others. be74d09d-6a91-200e-ee4e-df98ffb0a421
01.31.2017 16:22:51.04 w3wp.exe (0x0E8C) 0x13CC SharePoint Foundation Claims Authentication ax3f1 Verbose SPSuspendedFeaturesHttpHeader: Setting x-ms-suspended-features header to:features="" be74d09d-6a91-200e-ee4e-df98ffb0a421