Lightning for Outlook: Unable to authenticate users when using Outlook
Last updated 2022-02-10 ·Reference W-3462087 ·Reported By 19 users
When using Lightning for Outlook for the very first time, desktop Outlook users cannot authenticated with Salesforce. This is due to office addins always running in Protected Mode and any instance spawned from within the addin should also be run in protected mode in order for cookies to be shared.
If the internet options trusted sites points to a spawned url the issue will occur due to Trusted sites not having Protected Mode enabled by default.
In addition to this IT is able to push Protected Mode settings via Group Policy that will override the users selection. This Group Policy setting is found:
User Configuration | Administrative Templates | Windows Components | Internet Explorer | Internet Control Panel | Security Page | Internet Zone | Turn On Protected Mode
*Note: This does not affect the authentication flow when using Outlook Web Access
Currently there are two possible workarounds:
1. Enable Protected Mode under trusted sites if the Salesforce.com and Force.com domains are in IE Trusted Sites.
2. Authenticate user via OWA and this will be carried over into Outlook.
3. Remove Salesforce.com and Force.com domains from trusted sites.
Is it Fixed?
Any unreleased services, features, statuses, or dates referenced in this or other public statements are not currently available and may not be delivered on time or at all. Customers who purchase our services should make their purchase decisions based upon features that are currently available.