Accessing Outlook on the web for business using organizational credentials.
Configure the normal browser profile to retain and permit Microsoft sign-in cookies, then disable privacy or content-blocking extensions for Outlook; private browsing working while the normal profile fails points to browser-profile handling rather than Outlook intentionally ending every session.
Fix the normal browser profile
Since clearing all cookies has only helped temporarily and private browsing already works, use these more targeted checks:
- Allow cookies for Outlook and Microsoft authentication
- Ensure the browser is not blocking cookies or automatically deleting them when Outlook closes.
- If third-party/cross-site cookies are blocked globally, add site exceptions for:
-
outlook.office.com -
login.microsoftonline.com -
microsoftonline.com
-
- In Microsoft Edge, set Settings → Privacy, search, and services → Tracking prevention to Balanced for testing.
ESTSAUTHmaintains the current browser session, whileESTSAUTHPERSISTENTsupports remaining signed in after closing the browser.^1^ - Disable extensions selectively
- Temporarily disable ad blockers, tracker blockers, script blockers, cookie managers, and security/privacy extensions.
- Close all browser windows, reopen the browser, and test Outlook.
- If that works, re-enable extensions individually to identify the conflicting one.
- Test a new browser profile
- Create a new profile in the same browser rather than another private window.
- Sign in with only the affected Microsoft 365 account and open Outlook.
- If the session survives, migrate bookmarks to the new profile instead of repeatedly clearing the old profile’s cookies.
- Use a current supported browser
- Test the latest Edge, Chrome, or Firefox on Windows; on macOS, use current Edge, Chrome, Firefox, or Safari 16 or later.^2^
Distinguish a browser problem from an organization policy
A tenant idle-session policy is more likely when Outlook works normally at first and later displays “Your session is about to expire” after inactivity. That policy applies per browser session and can sign the user out of all Microsoft 365 tabs in that browser.^3^
For a work or school account, ask the Microsoft 365 administrator to check:
- Microsoft 365 admin center → Settings → Org settings
- Open Security & Privacy → Idle session timeout.
- Review whether it is enabled and the configured duration.
- Modify or disable it only if that matches the organization’s security requirements.
This setting is tenant-wide and cannot be scoped directly to individual users or groups. Microsoft Entra Conditional Access is required when different session behavior is needed for selected users or device conditions.^3^
The older Outlook-specific activity-based authentication timeout began retirement in January 2024, so administrators should prefer the Microsoft 365 idle-session setting for current configuration.^4^
If a new browser profile with permitted cookies and no extensions still signs out immediately—and no tenant timeout prompt appears—the next step is Microsoft 365 support, because the remaining issue may involve the account or tenant session rather than local browser state.
References