1787862 - NTLM Single Sign On via ADFS

Status: RESOLVED INCOMPLETE

(Core :: Networking, defect)

Description

[$harkBonE]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36

Steps to reproduce:

Support for NTLM SSO via adfs on a sharepoint website e.g workspace.contoso.com doesnt work. I enabled Windows SSO gpo, including adding the host address used by my users to access the internal SPR or federation Server sites the the following:

network.automatic-ntlm-auth.trusted-uris
network.negotiate-auth.delegation-uris
network.negotiate-auth.trusted-uris signon.autologin.proxy to be true

I have also activated
activate security.enterprise_roots.enabled

The only thing i havent verified on the federation server is detailed here, dont know if it is necessary => https://cloudrun.co.uk/adfs/single-sign-on-ssowith-chrome-firefox-and-adfs-4-0/

Actual results:

Login attempts just dont go past the login window, stuck on Firefox but surprisingly same site works flawlessly on chromium browser after testing on it..

Expected results:

Should have redirected to my sharepoint workspace after entering my windows credentials in the username and password fields but nothing happened.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Networking' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Kershaw Chang [:kershaw]]

Could you try to capture a http log?
Please also add negotiateauth in MOZ_LOG environment variable.
You could send the log to [e-mail] if you have any privacy concern.
Thanks.

Comment 3

[Valentin Gosu [:valentin] {{ PTO 3 July - 3 August }}]

No response from reporter.