Windows Integrated Authentication vs IE session credentials

Windows Integrated Authentication vs IE session credentials

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Windows Integrated Authentication vs IE session credentials Scewbedew 12-18-2006
Posted by =?Utf-8?B?U2Nld2JlZGV3?= on December 18, 2006, 5:11 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
When accessing a web site that requires authentication, I'm only required to
log on once; after that my logon credentials are active for that IE session
(I believe).

Assume that I log on to this site with logon credentials that are separate
from my Windows logon.

Now, if I - using that logged-on session - accesses another web site that is
configured for Windows Integrated Authentication - what will happen? Will the
browser try to use the credentials active for that session, or will it always
ignore those in favour of the Windows logon credentials?

Posted by on December 20, 2006, 6:26 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Internet Explorer will first use your Windows session credentials. If
these fail, it will prompt you to enter in site-specific credentials.
This process will be repeated for all Windows-integrated websites that
you visit.

Internet Explorer will not reuse site-specific credentials from one
site on another. The site is identified by the URL or IP address. To
demonstrate this, logon to a Windows-integrated site using the URL.
Then, in the same IE browser window, enter in site using the IP
address. You will be prompted to re-authenticate.

J Wolfgang Goerlich

Scewbedew wrote:
> When accessing a web site that requires authentication, I'm only required to
> log on once; after that my logon credentials are active for that IE session
> (I believe).
>
> Assume that I log on to this site with logon credentials that are separate
> from my Windows logon.
>
> Now, if I - using that logged-on session - accesses another web site that is
> configured for Windows Integrated Authentication - what will happen? Will the
> browser try to use the credentials active for that session, or will it always
> ignore those in favour of the Windows logon credentials?


Similar ThreadsPosted
Integrated Windows Authentication w/Netscape 8? December 27, 2005, 1:39 pm
Linked Servers fail with Integrated Authentication October 12, 2007, 4:39 pm
integrated fingerprint reader windows login feature January 4, 2006, 2:02 pm
Assign USB ports to user's session Windows XP August 15, 2007, 6:00 pm
How to show Windows Credentials Prompt July 11, 2008, 10:46 am
No credentials being passed across network with Windows Authentica August 8, 2007, 11:22 am
MS05-039 breaks when integrated into unattended installs January 15, 2006, 7:11 pm
Single session login April 17, 2007, 5:02 am
Securing a Public Computer Session December 16, 2006, 5:56 pm
J10 Logoff Based on Server Session Inactivity January 17, 2006, 11:56 am

The site map in XML format XML site map

Contact Us | Privacy Policy