Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Microsoft Edge prompts for credentials when you visit a website through an authenticated proxy


View products that this article applies to.

Symptoms

When you use Microsoft Edge to visit an Internet site through an authenticated proxy that either is in a transparent configuration or uses a load balancer, you are prompted for credentials. 

 

↑ Back to the top


Resolution

To avoid this behavior, add the proxy IP address to the following Group Policy policy:

\Administrative Templates\Network\Network Isolation\Internet Proxy Server for Apps
 

Note Enter only the IP address. The proxy name does not have any effect in this policy.

 

↑ Back to the top


Status

This behavior is by design.

 

↑ Back to the top


More Information

The Edge content process for the Internet zone does not have the enterprise credential capability. This is a security measure to prevent sending your credentials automatically on the Internet.

When Edge tries to authenticate, LSASS checks whether Edge is authenticating by using a proxy. That is the only scenario that we should automatically authenticate in the Internet zone.

LSASS verifies the status of Edge through the firewall service. The service has a record of the proxy that indicates whether the authenticating server is a proxy.

If the proxy is a transparent proxy or if the proxy is behind a load balancer, that means that the IP of the proxy that we are using differs from the resolvable address. In this situation, the proxy check fails in the firewall service, and Edge has to prompt for credentials.

↑ Back to the top


Keywords: kb, kbsurveynew

↑ Back to the top

Article Info
Article ID : 4050864
Revision : 8
Created on : 10/31/2017
Published on : 10/31/2017
Exists online : False
Views : 268