Firefox and IWA Configuration for SSON

Firefox and IWA Configuration for SSON

book

Article ID: CTX253789

calendar_today

Updated On:

Description

The user is prompted for credentials when trying to access the Storefront URL instead of being automatically logged on

Environment

Citrix is not responsible for and does not endorse or accept any responsibility for the contents or your use of these third party Web sites. Citrix is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by Citrix of the linked Web site. It is your responsibility to take precautions to ensure that whatever Web site you use is free of viruses or other harmful items.

Resolution

Configured Firefox for IWA, Perform the following steps: 
  1. Open Firefox on the computer that will authenticate using IWA.
  2. In the address bar, type about:config.
  3. Click "I accept the risk!".
  4. In the Search bar, type negotiate.
  5. Double-click network.negotiate-auth.delegation-uris.
  6. Enter the name of your corporate Windows domain (for example, mydomain.com).
  7. Click OK.
  8. Double-click network.negotiate-auth.trusted-uris.
  9. Enter the name of your corporate Windows domain (for example, mydomain.com).
  10. Click OK.
  11. Close and Restart Firefox.
For more information, refer to https://docs.citrix.com/en-us/netscaler/12/aaa-tm/ns-aaa-config-protocols-con/ns-aaa-config-protocols-krb5-ntlm-intro-con/kerberos-config-on-client.html

Problem Cause

Unlike Chrome which shares Internet Explorer's IWA settings, Mozilla Firefox must be configured for IWA and has its own settings

Additional Information

https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication
https://docs.citrix.com/en-us/netscaler/12/aaa-tm/ns-aaa-config-protocols-con/ns-aaa-config-protocols-krb5-ntlm-intro-con/kerberos-config-on-client.html