SSO

From ip tuning
Jump to: navigation, search

SSO in Firefox

Enabling SSO in Firefox involves some changes to FF's configuration.

You need to access Firefox internal configuration registry, by entering about:config in the address bar.

Sso-about-config.png

Select the I'll be careful, I promise! button.

Let's assume your trust domain is domain.com

NTLM authentication

If your SSO implementation (only) includes NTLM authentication, you can configure Firefox to forward your authentication to the site:

Parameter Value
network.automatic-ntlm-auth.trusted-uris .domain.com

If you don't want to validate the entire domain, you can add specific hosts separated by commas. Firefox will always match the rightmost part of the value.

Authentication Negotiation

Autologin

Enable Autologin, so Firefox will login into SSO:

Parameter Value
signon.autologin.proxy true

This will allow Firefox to send your credentials after negotiation is established.

Trusted URIs for Authentication

This allows Firefox to send the Kerberos ticket to the hosts/domains defined here:

Parameter Value
network.negotiate-auth.trusted-uris .domain.com

If you don't want to validate the entire domain, you can add specific hosts separated by commas. Firefox will always match the rightmost part of the value.

See also