How to configure authentication for different browsers to enable transparent and secure authentication on web...












1














Currently experiencing issues with configuring browsers to enable transparent and secure authentication on web servers without prompt. Working in a Windows 10 Pro environment and IE 11.



Turns out Mozilla is working just fine after editing network.automatic-ntlm-auth.trusted-uris with our SSO URL (sso.domain.com), but still can't make it work with IE and Chrome despite taking these steps:




  • Adding the SSO URL to the Intranet zone

  • Automatic logon in Intranet zone

  • Enabling Enable Integrated Windows Authentication in Advanced settings
    Additionally I've enable via GPO "Allow updates to status bar via script"


Yet IE keeps prompting for credentials, and seems to be treating our SSO URL as inside the Internet zone.



SupportedUserAgents:



MSAuthHost/1.0/In-Domain
MSIE 6.0
MSIE 7.0
MSIE 8.0
MSIE 9.0
MSIE 10.0
MSIE 11.0
MSIPC
Windows Rights Management Client
Mozilla/5.0
Edge/12
Chrome



Our IIS authentication is configured as such:



Anonymous Authentication is enabled with the IUSR



Enable Windows Authentication. In the the "Providers" NTLM is first.



Under Advanced Settings the Extended Protection is "Accept" and Enable Kernel-mode authentication is CHECKED.





Is there something I am missing?



Thanks,










share|improve this question





























    1














    Currently experiencing issues with configuring browsers to enable transparent and secure authentication on web servers without prompt. Working in a Windows 10 Pro environment and IE 11.



    Turns out Mozilla is working just fine after editing network.automatic-ntlm-auth.trusted-uris with our SSO URL (sso.domain.com), but still can't make it work with IE and Chrome despite taking these steps:




    • Adding the SSO URL to the Intranet zone

    • Automatic logon in Intranet zone

    • Enabling Enable Integrated Windows Authentication in Advanced settings
      Additionally I've enable via GPO "Allow updates to status bar via script"


    Yet IE keeps prompting for credentials, and seems to be treating our SSO URL as inside the Internet zone.



    SupportedUserAgents:



    MSAuthHost/1.0/In-Domain
    MSIE 6.0
    MSIE 7.0
    MSIE 8.0
    MSIE 9.0
    MSIE 10.0
    MSIE 11.0
    MSIPC
    Windows Rights Management Client
    Mozilla/5.0
    Edge/12
    Chrome



    Our IIS authentication is configured as such:



    Anonymous Authentication is enabled with the IUSR



    Enable Windows Authentication. In the the "Providers" NTLM is first.



    Under Advanced Settings the Extended Protection is "Accept" and Enable Kernel-mode authentication is CHECKED.





    Is there something I am missing?



    Thanks,










    share|improve this question



























      1












      1








      1







      Currently experiencing issues with configuring browsers to enable transparent and secure authentication on web servers without prompt. Working in a Windows 10 Pro environment and IE 11.



      Turns out Mozilla is working just fine after editing network.automatic-ntlm-auth.trusted-uris with our SSO URL (sso.domain.com), but still can't make it work with IE and Chrome despite taking these steps:




      • Adding the SSO URL to the Intranet zone

      • Automatic logon in Intranet zone

      • Enabling Enable Integrated Windows Authentication in Advanced settings
        Additionally I've enable via GPO "Allow updates to status bar via script"


      Yet IE keeps prompting for credentials, and seems to be treating our SSO URL as inside the Internet zone.



      SupportedUserAgents:



      MSAuthHost/1.0/In-Domain
      MSIE 6.0
      MSIE 7.0
      MSIE 8.0
      MSIE 9.0
      MSIE 10.0
      MSIE 11.0
      MSIPC
      Windows Rights Management Client
      Mozilla/5.0
      Edge/12
      Chrome



      Our IIS authentication is configured as such:



      Anonymous Authentication is enabled with the IUSR



      Enable Windows Authentication. In the the "Providers" NTLM is first.



      Under Advanced Settings the Extended Protection is "Accept" and Enable Kernel-mode authentication is CHECKED.





      Is there something I am missing?



      Thanks,










      share|improve this question















      Currently experiencing issues with configuring browsers to enable transparent and secure authentication on web servers without prompt. Working in a Windows 10 Pro environment and IE 11.



      Turns out Mozilla is working just fine after editing network.automatic-ntlm-auth.trusted-uris with our SSO URL (sso.domain.com), but still can't make it work with IE and Chrome despite taking these steps:




      • Adding the SSO URL to the Intranet zone

      • Automatic logon in Intranet zone

      • Enabling Enable Integrated Windows Authentication in Advanced settings
        Additionally I've enable via GPO "Allow updates to status bar via script"


      Yet IE keeps prompting for credentials, and seems to be treating our SSO URL as inside the Internet zone.



      SupportedUserAgents:



      MSAuthHost/1.0/In-Domain
      MSIE 6.0
      MSIE 7.0
      MSIE 8.0
      MSIE 9.0
      MSIE 10.0
      MSIE 11.0
      MSIPC
      Windows Rights Management Client
      Mozilla/5.0
      Edge/12
      Chrome



      Our IIS authentication is configured as such:



      Anonymous Authentication is enabled with the IUSR



      Enable Windows Authentication. In the the "Providers" NTLM is first.



      Under Advanced Settings the Extended Protection is "Accept" and Enable Kernel-mode authentication is CHECKED.





      Is there something I am missing?



      Thanks,







      internet-explorer authentication credentials






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Dec 27 '18 at 17:07







      user10839588

















      asked Dec 27 '18 at 17:00









      user10839588user10839588

      62




      62






















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "3"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388173%2fhow-to-configure-authentication-for-different-browsers-to-enable-transparent-and%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Super User!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388173%2fhow-to-configure-authentication-for-different-browsers-to-enable-transparent-and%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Index of /

          Tribalistas

          Listed building