Updated Wiki: Troubleshooting Negotiate

This is a step-by-step guide an Q&A on troubleshooting Negotiate authentication.

Browser Configuration

Most easy problems are caused by browser configurations. The browser must believe that the target URL is in theIntranet zone.

Internet Explorer

Ensure that Integrated Windows Authentication is enabled.

1. Choose the Tools, Internet Options menu.
2. Click the Advanced tab.
3. Scroll down to Security
4. Check Enable Integrated Windows Authentication.
5. Restart the browser.

The target website must be in the Intranet Zone.

1. Navigate to the website.
2. Choose the Tools, Internet Options menu.
3. Click the Local Intranet icon.
4. Click the Sites button.
5. Check Automatically detect intranet network.
6. If the above didn't solve the problem, click Advanced.
7. Add the website to the list.

Firefox

1. Type about:config in the address bar and hit enter.
2. Type network.negotiate-auth.trusted-uris in the Filter box.
3. Put your server name as the value. If you have more than one server, you can enter them all as a comma separated list.
4. Close the tab.

Troubleshooting WAFFLE

• See [[FAQ]].

Still Need Help?

Trace the HTTP request/response.

1. Download and install IEHttpHeaders.
2. Choose Tools, Display IEHttpHeaders.
3. Make one request that ends up in a popup or failure.
4. Copy the entire HTTP conversation.

Post the http conversation with your question into discussions.