I have a custom ISAPI auth filter that is set up on ms exchange web
site. I have made some changes and now after the user logs in I get the
user credentials in the url.
So the url is no longer https://hostname/exchange, it is
https://hostname/exchange/?user=user...er=%2Fexchange.

In OnAuthentication event I copy the credentials and that's it.
Does anyone know why are the user credentials in the url ?

Thanks in advance for any suggestions.