914227 - Firefox uses SSO Windows Integrated Authentication in Private Browsing Mode

Status: RESOLVED DUPLICATE of bug 1248564

(Core :: Networking, defect)

Description

[Wesley Hardman]

When in private browsing mode, Firefox still performs single-sign-on Windows Integrated Authentication using the preferences network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris.

STR:
1. Find/Create a website with WIA where SSO can be performed.
2. Enable both network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris for the site in step 1.
3. Open the site to verify that SSO is working.
4. Open a private tab/window.
5. Open the site in the private tab.

Expected results:
Firefox is in private browsing mode and should not be automatically using the SSO credentials.  It should prompt with a blank prompt the same way it does without the SSO.

Actual Results:
Firefox send the SSO credentials without any user interaction.

Bug 579611 is probably a duplicate/similar issue from before the new private browsing implementation.

Comment 1

[(no longer active)]

Jason, do you know where this magic lives?

Comment 2

[Josh Matthews [:jdm]]

http://mxr.mozilla.org/mozilla-central/source/extensions/auth/ is the auth modules used by http://mxr.mozilla.org/mozilla-central/source/extensions/auth/nsHttpNegotiateAuth.cpp, which is the only file that references the prefs mentioned in comment 0.

Comment 3

[Jason Duell]

Sounds like comment 2 got it.  If not, ask :mayhemer

Comment 4

[muralivc27]

I have the same problem. Did anyone able to resolve this issue?

Comment 5

[Honza Bambas (:mayhemer)]

This has already been fixed.

Comment 6

[wizk11]

Hi,

How can I enable this? 

I would like to use SSO/Integrated Authentication in Private mode. It should be an optional feature.
Any way to enable this please?

Thanks.

Comment 7

[Mike Kaply [:mkaply]]

(In reply to wizk11 from comment #6)

Hi,

How can I enable this?

I would like to use SSO/Integrated Authentication in Private mode. It should
be an optional feature.
Any way to enable this please?

Thanks.

Yes, set the preference

network.auth.private-browsing-sso to true or use the Authentication->PrivateBrowsing policy