搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

Kerberos Authentication with ADFS not working in Firefox Quantum

  • 2 回覆
  • 3 有這個問題
  • 1 次檢視
  • 最近回覆由 jmpsymalla

more options

We are attempting to use ADFS with Kerberos. The /adfs/ls/wia URL works out of box with both Internet Explorer and Google Chrome, but we unable to make it work in Firefox Quantum. Instead we are presented with a completely blank screen. We are running ADFS 3.0 on Windows Server 2012 R2 with NTLM traffic disabled. When we temporarily enable NTLM on the ADFS server, Kerberos authentication works. We have also tried on a Windows Server 2016 box running ADFS 4.0 and we get the same results. Have have ensured that the WIA user agent includes Mozilla 5.0 and up.

We have also tried adjusting the URIS in about:config as suggested online to include our domain for the following values:

network.automatic-ntlm-auth.trusted-uris network.negotiate-auth.trusted-uris

We are wondering if there are any further configurations that we may need to get this to work.

Thanks

We are attempting to use ADFS with Kerberos. The /adfs/ls/wia URL works out of box with both Internet Explorer and Google Chrome, but we unable to make it work in Firefox Quantum. Instead we are presented with a completely blank screen. We are running ADFS 3.0 on Windows Server 2012 R2 with NTLM traffic disabled. When we temporarily enable NTLM on the ADFS server, Kerberos authentication works. We have also tried on a Windows Server 2016 box running ADFS 4.0 and we get the same results. Have have ensured that the WIA user agent includes Mozilla 5.0 and up. We have also tried adjusting the URIS in about:config as suggested online to include our domain for the following values: network.automatic-ntlm-auth.trusted-uris network.negotiate-auth.trusted-uris We are wondering if there are any further configurations that we may need to get this to work. Thanks

被選擇的解決方法

I would suggest taking this question to the enterprise mailing list:

https://mail.mozilla.org/listinfo/enterprise

You'll find more folks that might be doing something similar.

I don't have any experience in this area.

You could also check out:

https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication

to see if it has helpful information.

從原來的回覆中察看解決方案 👍 1

所有回覆 (2)

more options

選擇的解決方法

I would suggest taking this question to the enterprise mailing list:

https://mail.mozilla.org/listinfo/enterprise

You'll find more folks that might be doing something similar.

I don't have any experience in this area.

You could also check out:

https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication

to see if it has helpful information.

more options

mkaply - thank you for suggesting the enterprise mailing list, I will check that out.