An ASP.Net site using Windows Authentication pops up in the "Required Authentication Window" window in Firefox

Question

I have an ASP.Net application where I use Windows authentication to deny access to some components through roles. When using IE, the site displays the "Authentication Required" field once, allows the user to enter their username / password for Active Directory, and everything is in order.

HOWEVER, when using Firefox, the "Authentication Required" window appears, but when you click "ok" it appears again! He stays a few dozen times! If you click the “Cancel” button for all of them, it does not work properly, blocking access to the site. If you click cancel for all but 1 (which you authenticate correctly), it acts as if you were authenticated correctly.

My goal is for Firefox to act as IE and only ask the user once.

Answer 1

This forum post recommends updating your web.config to allow anon on WebResource.axd: http://forums.asp.net/p/1295804/2515478.aspx#2515478

Not perfect - I really don't understand WHY axd requests behave this way.

NOTE. NTLM requires that you maintain health if you install a script or firebug, you should see the message "Connection: keep-alive" in the request header: http://davenport.sourceforge.net/ntlm.html#ntlmHttpAuthentication

Answer 2

you can make Firefox behave like exacylt, for example IE, by adding the site in about: config → network.automatic-NTLM-auth.trusted-URIs then firefox will use Windows Auth for the site

Answer 3

It might be better to reverse engineer your login / authentication system, so authentication is only requested when the user first views / logs into the website (i.e. the login.aspx page) so that then the user credentials are cached on your website.