Wikis - Page Details

First published by Adam Conkle - MSFT (Microsoft)
When: 17 Sep 2010 11:52 AM
Last revision by Maheshkumar S Tiwari
When: 13 Sep 2013 4:47 AM
Revisions: 3
Comments: 6

Options

Can You Improve This Article?

Positively! Click Sign In to add the tip, solution, correction or comment that will help other users.

Report inappropriate content using these instructions.

AD FS 2.0: Continuously Prompted for Credentials When Using FireFox 3.6.3

Symptoms

Users are continuously prompted for credentials when authenticating to AD FS 2.0 while using FireFox 3.6.3. Internet Explorer does not exhibit this behavior.

Cause

The default FireFox 3.6.3 network authentication configuration is incorrect.

Resolution

Option 1: Upgrade to a newer version of Firefox

Option 2:
- a. Launch FireFox 3.6.3
- b. Click Tools > Clear Recent History
- c. In the location bar, type "about:config" (without the quotes) and press Enter
- d. The about:config will warn: "This might void your warranty!". Click "I'll be careful, I promise!" to continue to the about:config page
- e. On the about:config page, double-click "network.auth.force-generic-ntlm" and set its value to "true" ("false" is the default)
- f. Close FireFox 3.6.3
- g. Launch FireFox 3.6.3
- h. Click Tools > Clear Recent History
- i. Attempt to access the AD FS 2.0-protected resource again

AD FS, AD FS 2.0, adfs, ADFS 2.0, en-US [Edit tags]

Leave a Comment

Please add 2 and 3 and type the answer here:
Post

Wiki - Revision Comment List(Revision Comment)

| |

Comments

Maheshkumar S Tiwari

13 Sep 2013 4:47 AM

Maheshkumar S Tiwari edited Revision 1. Comment: Added tag, needs formatting
- Edit

Wikis - Comment List

| |

Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.

Comments

Posted by Randy Wiemer

on 6 Oct 2010 12:28 PM

Option 1 is not a certain solution. I installed 3.6.10 and had the problem until applying option 2.

Is there a fix for this problem with Google Chrome? The NTLM support in Chrome works in other Windows IIS web sites but not with ADFS.

Randy Wiemer

Oxford Computer Group
Edit
Posted by Location3 Media

on 19 Apr 2011 5:25 PM

This problem exists in Firefox 4 AND Google Chrome. And how could an end-user be expected to make this change to their Firefox config? Ludicrous. Is there still no robust fix for this problem?
Edit
Posted by Adam Conkle - MSFT

on 21 Apr 2011 8:54 AM

Hi Location3 Media,

For a more robust solution, you may consider using Internet Explorer or changing your authentication method to forms-based authentication (social.technet.microsoft.com/.../ad-fs-2-0-how-to-change-the-local-authentication-type.aspx).

Thanks,

Adam
Edit
Posted by Adam Conkle - MSFT

on 21 Apr 2011 8:57 AM

Also, if you would like to keep using IWA, you could turn off Extended Protection for Authentication for the AD FS servers (social.technet.microsoft.com/.../ad-fs-2-0-continuously-prompted-for-credentials-while-using-fiddler-web-debugger.aspx).

Thanks,

Adam
Edit
Posted by Location3 Media

on 21 Apr 2011 11:10 PM

Adam,

Your links were very helpful and both solutions worked for us! We decided to go with Forms-based Authentication. Thanks a ton for the help!

- Rob Richardson (Location3 Media)
Edit
Posted by Maheshkumar S Tiwari

on 13 Sep 2013 4:47 AM

Maheshkumar S Tiwari edited Revision 1. Comment: Added tag, needs formatting
Edit

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?

AD FS 2.0: Continuously Prompted for Credentials When Using FireFox 3.6.3

AD FS 2.0: Continuously Prompted for Credentials When Using FireFox 3.6.3

Symptoms

Cause

Resolution