Determine if your browser supports integrated Windows authentication

Question

Is there a way to determine if the NTLM browser supports without enabling NTLM for a specific site or directory in IIS and without displaying the login / popup dialog? Preferably, this is determined using ColdFusion or, possibly, with some combination of JS and CF. I would prefer not to restrict it to just IE, as other browsers (such as FF) support NTLM authentication.

Answer 1

If you request a page and the page returns 401 and says that it only accepts NTLM, and then the browser sends another HTTP packet trying to respond to it, then it supports NTLM. You do not need to force IIS to do this - you can have any page on which you can set response codes and NTLM header requests. If you did not receive another request, this means that the client was unable to authenticate this method.

You can detect this on the client by placing this request in an IFrame and then on the external page to check what happened in the iframe.

Answer 2

Based on Lou's answer, you can make a cfhttp request in a try / catch block. Then you check the response headers to determine the next steps.

Answer 3

Unfortunately, you can use browser sniffing and whitelisting.