ADFS basic authentication

testuser7 271 Reputation points
2021-10-06T13:32:14.753+00:00

Hello,

When my web application is sending the browser to ADFS for authentication, ADFS is challenging the user with "BASIC Authentication"
As a result, browser is asking user to provide username and password.

My problem is, if I am using Firefox I get the standard HTML basic-auth popup as attached in the screen-shot.
However, if I am using Edge then I am seeing the native "windows security" popup as attached in the screen-shot.
My understanding is that this is the default interpretation of Edge browser to resolve basic-authentication.
I do not want edge to behave this way.

Is it possible to configure edge to take the standard html popup route ??

138186-image.png

138214-image.png

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,186 questions
0 comments

12 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Nahuel Vacca 6 Reputation points
    2021-10-07T17:51:18.053+00:00

    Hi,

    If you are not going to use IWA, you might want to go to your ADFS server and disable Windows Authentication and allow forms authentication so that you don't get that authentication pop up. That Authentication Window is a Basic Authentication Popup because Negotiate (Kerberos, then NTLM) has failed.

    138646-image.png

    1 person found this answer helpful.
    0 comments
  2. Jai Verma 461 Reputation points
    2021-10-06T18:58:41.59+00:00

    Hello @testuser7

    Try below steps and see if this is the experience you are looking for

    You could open Internet Options and check the User Authentication option:

    Type "Internet Options" in the search box next to the Start menu button.

    Open Internet Options and click on Security tab.

    If the site is in Internet zone, click on Internet and under Security level click on Custon level.

    Scroll down for User Authentication and check if you have checked Prompt for user name and password.

    Choose other options if you have checked Prompt for user name and password.

    Click OK, Apply then restart the browser to try again.

    0 comments
  3. Pierre Audonnet - MSFT 10,166 Reputation points Microsoft Employee
    2021-10-07T01:55:39.67+00:00

    This is not basic authentication, it is likely a Integrated Windows Authentication, not a basic auth.

    The troubleshooting steps are available here: https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-iwa

    0 comments
  4. testuser7 271 Reputation points
    2021-10-07T12:29:24.463+00:00

    I guess I did not explain properly.

    Yes, you are right. Meaning ADFS is configured to first try Integrated Windows Authentication.
    It will definitely fail in my case.

    So when it fails, what is the fallback authentication ?
    My understanding is it is "Basic Auth"
    and for that I want the pure HTML based basic-auth popup.

    I do not want "windows security" popup.

    Do you think it is possible ?

  5. testuser7 271 Reputation points
    2021-10-07T19:24:39.027+00:00

    Thanks @Nahuel Vacca

    No, I can not disable Windows Authentication.
    But when Windows Authentication fails (because of any reason which is not important), I want user to see pure HTML Basic-authentication popup as fallback.

    How can we do that ?