搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Kerberos Authentication with ADFS not working in Firefox Quantum

  • 2 个回答
  • 3 人有此问题
  • 1 次查看
  • 最后回复者为 jmpsymalla

more options

We are attempting to use ADFS with Kerberos. The /adfs/ls/wia URL works out of box with both Internet Explorer and Google Chrome, but we unable to make it work in Firefox Quantum. Instead we are presented with a completely blank screen. We are running ADFS 3.0 on Windows Server 2012 R2 with NTLM traffic disabled. When we temporarily enable NTLM on the ADFS server, Kerberos authentication works. We have also tried on a Windows Server 2016 box running ADFS 4.0 and we get the same results. Have have ensured that the WIA user agent includes Mozilla 5.0 and up.

We have also tried adjusting the URIS in about:config as suggested online to include our domain for the following values:

network.automatic-ntlm-auth.trusted-uris network.negotiate-auth.trusted-uris

We are wondering if there are any further configurations that we may need to get this to work.

Thanks

We are attempting to use ADFS with Kerberos. The /adfs/ls/wia URL works out of box with both Internet Explorer and Google Chrome, but we unable to make it work in Firefox Quantum. Instead we are presented with a completely blank screen. We are running ADFS 3.0 on Windows Server 2012 R2 with NTLM traffic disabled. When we temporarily enable NTLM on the ADFS server, Kerberos authentication works. We have also tried on a Windows Server 2016 box running ADFS 4.0 and we get the same results. Have have ensured that the WIA user agent includes Mozilla 5.0 and up. We have also tried adjusting the URIS in about:config as suggested online to include our domain for the following values: network.automatic-ntlm-auth.trusted-uris network.negotiate-auth.trusted-uris We are wondering if there are any further configurations that we may need to get this to work. Thanks

被采纳的解决方案

I would suggest taking this question to the enterprise mailing list:

https://mail.mozilla.org/listinfo/enterprise

You'll find more folks that might be doing something similar.

I don't have any experience in this area.

You could also check out:

https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication

to see if it has helpful information.

定位到答案原位置 👍 1

所有回复 (2)

more options

选择的解决方案

I would suggest taking this question to the enterprise mailing list:

https://mail.mozilla.org/listinfo/enterprise

You'll find more folks that might be doing something similar.

I don't have any experience in this area.

You could also check out:

https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication

to see if it has helpful information.

more options

mkaply - thank you for suggesting the enterprise mailing list, I will check that out.