How to enable 3rd party cookies ONLY for Microsoft Teams

Question

The company I work for wants us to begin using Microsoft Teams however after logging in the page goes into a redirect loop for about a minute, and then finally ends up on this error screen.

I know that I could just open my browser settings (Chrome in my case) and just allow all 3rd party cookies... but I don't want to do that since it would do this for all websites. Unchecking this box does solve the issue, but it's not an acceptable resolution to this issue for me.

I also know that I can add exceptions to allow thirst party cookies from certain websites. I've tried adding teams.microsoft.com and even just microsoft.com, neither one works and I still get this error page.

How are you supposed to use Microsoft Teams without allowing every website to add whatever cookies they want to add? Am I missing something obvious here? It's worth noting that I've also disabled my adblocker software for this domain.

Answer 1

Add a cookie exception for https://login.microsoftonline.com. This worked for me at least.

Answer 2

I added all 4 entries and teams.microsoft.com is now working in Chrome with 3rd party cookies disabled. Thanks for the posts.

Where to add

chrome://settings/content/cookies under Allow

What I added

[*.]microsoft.com

[*.]microsoftonline.com

[*.]skype.com

[*.]online.lync.com

Answer 3

After login you can check in Chrome what cookies it uses.

Third party would be: .skype.com and maybe .online.lync.com

If you use IE you might have *.microsoft.com in your Trusted Zone but .skype.com is not and IE/Edge will throw error. (as sites are in different zones)

At the bottom left (click on the guid error code d928....) of your screenshot you can download a log file (to check details what URL are called and what the issue is)

Answer 4

As Ed B has already written it is sufficient to enter the URL https://login.microsoftonline.com.

To distribute the setting in a company you can set the following regestry value:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\CookiesAllowedForUrls]
"1"="https://login.microsoftonline.com"

To use wildcards in the Chrome Application (answer from Tilo), use this syntax:

[*.]skype.com
[*.]online.lync.com

Else the URL can not be entered. However, I did not have to add the two pages

Source: CLICK

Answer 5

you need to add an exception to chrome for both:

• [*.]microsoft.com
• [*.]microsoftonline.com

Answer 6

Many of these answers are good and solve the issue of the loop, however, they do not actually answer the question of adding third party links for JUST the parent URL. (I had solved my on login loop by allowing the 3rd party cookies under https:teams.microsoft.com, and searching for how to do this programmatically led me to this question.)

It's documented here in this question under @JuniorAdmin's answer that we're able to change the registry values to force a site's cookies as an exception (tested and validated in my own setup - see screenshots below).

To add the 3rd Party Cookies to a given URL you need to use two URL Patterns; the Syntax is as follows:

ThirdPartyCookieURLPattern,ParentURLPattern

Example:

https://stackoverflow.com,https://superuser.com

*,https://teams.microsoft.com

This would allow 3rd party cookies from only Stack Overflow to be executed in Super User, or ALL 3rd party cookies for Microsoft Teams.

Applying this, we are able to enforce this change. (In these screenshots, I've specified I want ALL third party cookies from the other 2 parent URL's I used in the initial test from screenshots above.)

---

Sources

Despite @JuniorAdmin's answer to this question, I did not learn about the Registry path from there. I found it here, where it referenced downloading a Bundle from this link'. (Perform a Bundle Download for your Architecture (32-bit, 64-bit) and then extract the bundle. Under the Configuration\examples\ directory, edit the Chrome.reg file as referenced to see what all can be set. Not sure if it contains every flag known, but it is fairly exhaustive.)

I stumbled upon the augmentation of the URL using 2 different URL Patterns from a Reddit article (justlittleme123's answer specifies it clearly), which led to an MSDN article that specifies it in case anyone needs to do this programmatically (pulled from justlittleme123's answer including highlighting, in case their answer is removed from Reddit). . .

Answer 7

On my Chrome 67 on Ubuntu 16.04 I had the exact same message saying that I needed to enable third party cookies. Since on my system these were already allowed this was apparently an incorrect error message.

On my system the Teams website started to work after I removed all locally stored data from Chrome that was related to the teams.microsoft.com website and then pressed the Try Again button.

Effectively I simply did REMOVE ALL under chrome://settings/cookies/detail?site=teams.microsoft.com. If this link does not work for you then use chrome://settings/siteData and search teams.microsoft.com

Answer 8

A workaround seems to be to just skip the web app and download their desktop application instead: https://teams.microsoft.com/downloads