Do you have an Intranet or a similar web site that requires the use of Integrated Windows Authentication? If so the default Firefox browser settings will always prompt you for a username and password first before accessing a site using Integrated Window Authentication.

Fortunately Firefox has the slick ability to easily modify it’s configuration to use Integrated Windows Authentication.

How to configure Firefox

1. Open Firefox
2. In the address bar type: about:config
   
3. Firefox3.x and later requires you to agree that you will proceed with caution.
4. After the config page loads, in the filter box type: network.automatic
5. * Modify network.automatic-ntlm-auth.trusted-uris by double clicking the row and enter http://www.replacewithyoursite.com or http://your-intranet-server-name
   
6. * Multiple sites can be added by comma delimiting them such as http://www.replacewithyoursite.com, http://www.replacewithyourintranetsite.com

Package for Large Installs

If you are a network administrator that has a lot of installs to do, you can modify the Firefox installer.

1. Use a tool such as 7-zip to extract Firefox Setup 2.x.x.exe
2. Extract browser.xpi from the setup
3. Edit all.js contained in browser.xpi contained in binjreprefs
4. Modify the entries as in items 4 and 5 above
5. Re-package browser.xpi and use the extracted setup to install Firefox

* Special Notes

To specify all subdomains use .replacewithyoursite.com instead of www.replacewithyoursite.com, help.replacewithyoursite.com, pictures.replacewithyoursite.com

Updated March 5, 2010

14 Responses to “How To: Firefox and Integrated Windows Authentication”

1. Authenifizierung Firefox | hilpers on January 17th, 2009 10:43 am

   [...] mit Frameset das Anmeldepopup wieder anzeigt, obwohl man sich > bereits richtig angemeldet hat? http://markmonica.com/2007/11/20/fir…uthentication/ — Gruss Jens http://www.it-training-grote.de/blog http://www.it-training-grote.de [...]

2. derek wilson» Blog Archive » Using Integrated Windows Authentication in IIS on September 26th, 2009 7:51 am

   [...] If the anonymous access option is checked then anyone can access the site if not then the user’s windows credentials will be sent by the browser. This happens automatically when using IE. If you use Firefox then you will be prompted for your credentials each time, though you can white-list domain hosts to have your credentials send automatically. [...]

3. Raghav on December 7th, 2009 2:42 am

   Hi,
   Many thanks for this tip. Its amazing…….

   Regards
   Rag

4. Jess on January 27th, 2010 10:24 am

   I’m trying to do this with an intranet – there is on .com – any solutions for this?

5. Steven Grant on February 24th, 2010 8:05 am

   I’ve tried this tip but for whatever reason, our Intranet (Oracle based) is still prompting for username password.

   Any ideas?

6. Bob on March 4th, 2010 4:53 pm

   If you are trying to do this on an Intranet, don’t use http://whatever.com, just use a comma separated list of server names.

   Also, you may want to set all three of the below keys to the same value:
   network.negotiate-auth.delegation-uris
   network.negotiate-auth.trusted-uris
   network.automatic-ntlm-auth.trusted-uris

7. Dan on September 17th, 2010 3:03 am

   This was very handy. Thanks a lot

8. bacima on September 26th, 2010 2:46 am

   Merci, mais ça me demande toujour le nom d’utilisateur et le mot de passe!! pouvez vous m’aider plus c’est urgent SVP ,Merci d’avance

9. Vadims Podans's blog - Поддержка цифровых сертификатов в интернет браузерах on November 30th, 2010 2:51 pm

   [...] Вот ссылка на настройку Windows Authentication в FireFox: Firefox and Integrated Windows Authentication. Opera и Safari никаким образом не поддерживают сквозную [...]

10. Daniel on December 30th, 2010 7:21 am

    There are 5 settings that need to be changed. See them all here:

    http://blog.webonweboff.com/2010/12/integrated-windows-authentication-and.html

    FireFox settings for Integrated Windows Authentication

11. Salesforce SSO with ADFS 2.0 – Force365 - Cloud Architects on December 28th, 2012 8:26 am

    [...] – not ok (requires this configuration change: http://markmonica.com/2007/11/20/firefox-and-integrated-windows-authentication/) Chrome – ok IE – requires the ADFS host to be added to the Trusted Site Zone. This can [...]

12. Authentification Windows sous Firefox | Ze blog de Giloux | Just another Blooh Sites site on January 30th, 2013 8:37 am

    [...] dit merci qui ? Merci la source [...]

13. Jean Pierre on February 7th, 2013 9:17 am

    Bon trucage!!

14. Ivanhoe on February 14th, 2013 2:05 am

    Great, thanks a lot

Leave a Comment