Closed Bug 914227 Opened 12 years ago Closed 9 years ago

Firefox uses SSO Windows Integrated Authentication in Private Browsing Mode

Categories

(Core :: Networking, defect)

x86
Windows 7
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1248564

People

(Reporter: bugzilla, Unassigned)

Details

(Whiteboard: [necko-backlog][ntlm])

When in private browsing mode, Firefox still performs single-sign-on Windows Integrated Authentication using the preferences network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris. STR: 1. Find/Create a website with WIA where SSO can be performed. 2. Enable both network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris for the site in step 1. 3. Open the site to verify that SSO is working. 4. Open a private tab/window. 5. Open the site in the private tab. Expected results: Firefox is in private browsing mode and should not be automatically using the SSO credentials. It should prompt with a blank prompt the same way it does without the SSO. Actual Results: Firefox send the SSO credentials without any user interaction. Bug 579611 is probably a duplicate/similar issue from before the new private browsing implementation.
Component: Private Browsing → Networking
Product: Firefox → Core
Jason, do you know where this magic lives?
Flags: needinfo?(jduell.mcbugs)
Sounds like comment 2 got it. If not, ask :mayhemer
Flags: needinfo?(jduell.mcbugs)
Whiteboard: [necko-backlog][ntlm]
I have the same problem. Did anyone able to resolve this issue?
This has already been fixed.
Status: UNCONFIRMED → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
Hi, How can I enable this? I would like to use SSO/Integrated Authentication in Private mode. It should be an optional feature. Any way to enable this please? Thanks.

(In reply to wizk11 from comment #6)

Hi,

How can I enable this?

I would like to use SSO/Integrated Authentication in Private mode. It should
be an optional feature.
Any way to enable this please?

Thanks.

Yes, set the preference

network.auth.private-browsing-sso to true or use the Authentication->PrivateBrowsing policy

You need to log in before you can comment on or make changes to this bug.