Issue getting Webthority and Defender working together.
"Rollout Mode" not working with Webthority when passing to OWA. Webthority reports error "Defender does not have roll of WR_Webmail" when authenticating with no token.
With a token user is passed to OWA.
This issue can occur when the payload is not set on the "Active Directory Rollout" Access Node, but is set on the "Token" Access Node.
In the Active Directory Password (Rollout Mode) Access Node add payload 26 per the Webthority requirements.
When installing Defender with Active Directory Password (Rollout Mode) to pass through Webthority, both the "Rollout" Access Node and "Token" Access Node must have payload 26 configured.