TokenFactoryIFrame

Question

Hello,

I am using outlook in a Safari browser on my Mac. Whenever I visit outlook "TokenFactoryIFrame" downloads every 5-10 seconds. I have not clicked on any of these as I do not know if it is malware or not.

Does anyone know what this is and how I can fix it?

* 2022-05-04: Seems this is still happening to a lot of people and there is no full solution yet.

Thank you

---

* * * Added by moderator on May 4, 2022.

A workaround posted by William Bennett (willbennett)") on Page 58.

Here's an article on it that was just written a short time ago:

How to stop Outlook’s TokenFactoryIframe downloads in Safari Issue affect users of the online Office apps. By Roman Loyola

https://www.macworld.com/article/697648/how-to-safari-outlook-tokenfactoryiframe-stop-downloads.html

Answer 1

Hi All,

Service Health Dashboard has indicated that issue EX375556 has been resolved as of: End time: Thursday, May 5, 2022, at 7:32 PM UTC.

User Impact: Users were repeatedly prompted to download "TokenFactoryIframe" when browsing Outlook on the web via Safari on Mac OS.

Final status: Our fix addressing the impacting property mismatch has successfully completed deployment. We've confirmed via service telemetry and through additional reports from some formerly affected users that impact is remediated for all users.

Scope of impact: This issue affected all users leveraging the Safari browser to access Outlook on the web.

Root cause: A recent update to our Office User Experience (UX) changed a parameter from “conditional” to “required” in order to sync client-side and service-side properties. However, the Outlook on the web service didn’t receive the same change as intended, resulting in a property mismatch and repeated "TokenFactoryIFrame" download prompts.

If you are still experiencing an issue, please let us know by starting a new thread as this may indicate either a scoping issue or an independent problem.

Best regards,

Shyamal

Answer 2

Hi All,

This issue was posted to the Service Health Dashboard (SHD) as incident EX375556, Start time: Monday, May 2, 2022, at 8:57 PM UTC.

User Impact: Users are repeatedly prompted to download "TokenFactoryIframe" when browsing Outlook on the web via Safari on Mac OS.

More info: Users report seeing the same download prompt when accessing office.com as well from the Safari browser.

Current status: The deployment of the fix has completed in the majority of the environments, and we've confirmed with some reporting users that the impact is remediated. We're continuing to monitor the progression of the fix as it finishes deploying to ensure the issue is resolved for all remaining environments.

Tenant administrators can view current information and updates on SHD at the link here https://portal.office.com/AdminPortal/Home#/servicehealth

For affected customers to easily identify the information here, this thread will be closed. We will update to the thread once the issue is resolved or you can obtain the most recent information from SHD.

Your patience and cooperation are highly appreciated.

Best regards,

Shyamal

Answer 3

I signed into my work email which uses Outlook last night from home using a Safari Browser. I pop-up screen appeared and asked if I wanted to allow downloads. Since this was work email I said yes. Then I started getting TokenFactoryIFrame downloads and can't stop them from being downloaded when I sign in from home to my work email on Safari.

This does not happen on Chrome. My personal email on msn.com using Outlook is not affected.

I called work IT and they helped my delete keychains, but that did not solved the issue. I would appreciate help in solving this problem, as I do not know how serious it is regarding being a virus.

Thank you,

Richard

Answer 4

Guys, this is almost malicious from an outside perspective. Seriously hoping you guys slow down your release process in preference of quality checks for things like this...