SharePoint FBA: SSL Required

Recent changes in Chrome to improve cookie security required flags being set on the cookies in order for them to continue to function cross-domain. Microsoft released patches to SharePoint to implement the flags – however the flags also require the cookie to be marked SECURE and now only allows the cookies to function with HTTPS/SSL. Granted you should only be using FBA in production with SSL, however it was convenient to not use it in dev/test environments. So if you think you have FBA setup correctly, but aren’t able to login – this is most likely the problem. Setup the site to use SSL and it should start working.

If you have both windows authentication and forms authentication enabled on the same site, and choose to authenticate with windows authentication – even that will no longer work without SSL enabled. You’ll get a “Sorry, Something Went Wrong” – “An unexpected error has occurred.” error.


Posted

in

,

by

Comments

2 responses to “SharePoint FBA: SSL Required”

  1. Phil Clemons Avatar
    Phil Clemons

    We have followed these recommendations and now we can’t open the FBA site unless we use IE mode. (We are using Edge)
    Any insights??

    1. Chris Coulson Avatar

      You shouldn’t need to use IE mode. Check the console in the developer tools (F12) to see if there are some errors being logged when not in IE mode.

Leave a Reply

Your email address will not be published. Required fields are marked *