I am accessing a web application using Chrome. If I sign out of the app and clear all Chrome history/cookies/etc (even Flash cookies which are now handled by Chrome in the same Clear History area) and then re-access the site, I am automatically logged in without being prompted for credentials.
I then launched Chrome in Incognito mode and was able to reproduce the same behavior. However, the I was prompted upon the first logon while in Incognito mode.
The web application behaves as expected in Internet Explorer 10.
Some info about the application:
- It's a Sharepoint site using NTLM authentication
- The credentials are Active Directory-based, as the username is domain\username
- My connection is over the Internet and there is no AD relationship between my local Windows account, my Windows PC. In other words I (meaning my locally logged on user and my PC) are not in any way part of their AD domain.
- The site is running SSL on port 443
Why might Chrome be automatically authenticating me?