Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

My computer and user belonging to the domain, I want to connect to my NTLM-SSO-enabled intranet website http://intranet without providing a login/password.

How to do it with Mozilla Firefox?

share|improve this question

3 Answers 3

up vote 7 down vote accepted
  • When accessing the relevant site you need to make sure you run Firefox as the Windows user you want to log on as. If you always log onto a workstation as a domain user then there is no issue, otherwise you may need to Shift + right-click the shortcut and choose Run as different user..., or setup a shortcut with your credentials saved
  • In Firefox, type about:config In the address bar and press return.
  • After the config page loads, in the filter box type: network.automatic. You should see a search result of network.automatic-ntlm-auth.trusted-uris
  • Modify network.automatic-ntlm-auth.trusted-uris by double clicking the row and enter the relevent site
  • Multiple sites can be added by comma delimiting them such as: https://your_SecureAuth_FQDN.com, https://www.replacewithyourintranetsite.com
  • Click OK. You may need to restart Firefox for changes to take effect.

This is based on numerous pages I found on the internet, including this Firefox support page

share|improve this answer
    
this does not work. i have read the same thing on many pages. is there an update for firefox v30 –  sharif Jun 24 '14 at 15:12
    
@sharif: Try using the downloading the following add-on: addons.mozilla.org/en-US/firefox/addon/… then click Tools->Integrated Authentication Sites and check the box at the bottom that says Enable pass-through on all non-FQDN sites even if they aren't listed here –  James Jun 24 '14 at 15:25
1  
@sharif: The issue that affects Firefox 30 specifically is that insecure v1 of NTLM has been disabled by default. It could be that you need to use the about:config editor to set network.negotiate-auth.allow-insecure-ntlm-v1 to be true. However, NTLMv1 is very old, so I'm not sure if you would be using it. Relevant link: developer.mozilla.org/en-US/Firefox/Releases/30/… –  James Jun 24 '14 at 15:34

The suggested solution with network.automatic-ntlm-auth.trusted-uris was not enough in my case. Then I tried the same in network.negotiate-auth.trusted-uris Now it works.

share|improve this answer

To authenticate Firefox automatically through a proxy (avoiding NTLM prompt), you have to modify 3 parameters

  • network.automatic-ntlm-auth.trusted-uris
  • network.negotiate-auth.delegation-uris
  • network.negotiate-auth.trusted-uris

and change it with the URL of your proxy redirection page, like http://myproxy.local

Modify

  • signon.autologin.proxy to be true

If you do it by script, be careful with the dots (.) and the dash (-) in the parameters. This is often the problem.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.