20Nov/074
How To: Firefox and Integrated Windows Authentication
Do you have an Intranet or a similar web site that requires the use of Integrated Windows Authentication? If so the default Firefox browser settings will always prompt you for a username and password first before accessing a site using Integrated Window Authentication.
Fortunately Firefox has the slick ability to easily modify it's configuration to use Integrated Windows Authentication.
How to configure Firefox
- Open Firefox
- In the address bar type: about:config
- Firefox3.x and later requires you to agree that you will proceed with caution.
- After the config page loads, in the filter box type: network.automatic
- * Modify network.automatic-ntlm-auth.trusted-uris by double clicking the row and enter http://www.replacewithyoursite.com or http://your-intranet-server-name
- * Multiple sites can be added by comma delimiting them such as http://www.replacewithyoursite.com, http://www.replacewithyourintranetsite.com
Package for Large Installs
If you are a network administrator that has a lot of installs to do, you can modify the Firefox installer.
- Use a tool such as 7-zip to extract Firefox Setup 2.x.x.exe
- Extract browser.xpi from the setup
- Edit all.js contained in browser.xpi contained in binjreprefs
- Modify the entries as in items 4 and 5 above
- Re-package browser.xpi and use the extracted setup to install Firefox
* Special Notes
To specify all subdomains use .replacewithyoursite.com instead of www.replacewithyoursite.com, help.replacewithyoursite.com, pictures.replacewithyoursite.com
Updated March 5, 2010

December 7th, 2009 - 02:42
Hi,
Many thanks for this tip. Its amazing…….
Regards
Rag
January 27th, 2010 - 10:24
I’m trying to do this with an intranet – there is on .com – any solutions for this?
February 24th, 2010 - 08:05
I’ve tried this tip but for whatever reason, our Intranet (Oracle based) is still prompting for username password.
Any ideas?
March 4th, 2010 - 16:53
If you are trying to do this on an Intranet, don’t use http://whatever.com, just use a comma separated list of server names.
Also, you may want to set all three of the below keys to the same value:
network.negotiate-auth.delegation-uris
network.negotiate-auth.trusted-uris
network.automatic-ntlm-auth.trusted-uris