How to stop IE11 from caching security context - single-sign-on

We have windows integrated SSO setup for our CMS platform but if our scheduled task to open IE 11 and load the CMS home page runs before the VPN is signed on then it doesn't get authenticated and we forward to another site. If I try to browse to intranet CMS site again after VPN is signed on it still won't work because IE11 caches security context. If I close IE11 and re-open and browse it does SSO just fine because security context is refreshed. Any idea how to override this in registry or something?

It seems that the CMS website caches the vpn data and you can try to disable IE website cache to see if it works:
Click Alt+X to open the Tools panel in IE 11.
From the menu, select Internet options.
Click Settings in Browsing history section on the General tab.
On the Temporary Internet Files tab, confirm that Every time I visit the webpage is selected.
On the Caches and databases tab, confirm that Allow website caches and databases is not selected.
Click OK to apply the settings.

Related

Can't create GitHub account

I want to create a GitHub account, but something is blocking me from doing that
As you see, it's asking me to do captcha test over and over again.
Should I report this as a bug? is this also happening to you?
I suggest to wait some minutes and try it later. Or you can just try to do the following steps:
Ensure JavaScript is enabled on your browser.
Ensure your browser is supported. If your browser isn't supported, upgrade your browser or install a supported browser. For a list of supported browsers, see "Supported browsers".
Ensure your network configuration is not blocking https://octocaptcha.com/ or https://arkoselabs.com/. If you're behind a corporate firewall, contact your IT administrator to allow those domains. To verify access to these domains, visit https://octocaptcha.com/test and ensure the text "Connection successfully made!" is displayed, then visit https://client-demo.arkoselabs.com/github and ensure you are able to load the captcha.
Ensure your browser does not have plug-ins or extensions that may be interfering with GitHub. If so, temporarily disable the plug-ins or extensions during captcha verification.
Otherwise everything works according to the status page.
In Debian: apt install epiphany-browser
It just bypassed github's signup "barriers" in a way that fresh installations of Firefox ESR / Firefox latest / Chromium... in Debian, Windows, Android... could not!
I tried many times, but I couldn't create an account on Github. After that, I tried to create an account on GitHub using my mobile google chrome, then I successfully created an account in Github. Thanks.

Integrated Windows authentication in Microsoft Edge

I am trying to implement Integrated Windows authentication on Edge, but it always prompts me for credentials, whereas Integrated Windows authentication is working for IE, Chrome and Firefox. I have tried adding the site to local intranet sites in security options and enabled automatic login but no luck on edge browser.
Does Edge support Integrated Windows authentication?
I have tried adding the site to local intranet sites in security options and enabled automatic login as well login with current username and password.
Which version of Microsoft Edge version are you using?
Please check the following configuration to Enable Integrated Windows Authentication:
Open Internet Explorer and select "Tools" dropdown.
Select the "Advanced" tab.
Scroll down to the "Security" section until you see "Enable Integrated Windows Authentication". Select the box next to this field to enable.
Select the "Security" tab.
Select "Local Intranet" and select the "Custom Level" or "Advanced" button.
Scroll down to "User Authentication" > "Logon".
Checked the "Automatic logon with current user name and password" option.
In the "Security" tab, select "Local Intranet" option and click the "Sites" button.
Click the "Advanced" button, then, add your website to the zone.
Close the window and apply the configuration.
If still not working, I suggest you could feedback your issue to Microsoft Edge platform forum, like this thread.
It may be because of AuthServerAllowlist. You can check your policies at edge://policy/.
Specifies which servers to enable for integrated authentication.
Integrated authentication is only enabled when Microsoft Edge receives
an authentication challenge from a proxy or from a server in this
list.
[...]
If you don't configure this policy, Microsoft Edge tries to detect if
a server is on the intranet - only then will it respond to IWA
requests. If the server is on the internet, IWA requests from it are
ignored by Microsoft Edge.
As the documentation states; if your server/site isn't included in the AuthServerAllowlist and Edge can't identify your site as an intranet site Edge won't use Integrated Windows Authentication.
Enabling Integrated Windows Authentication
Use the following procedure to enable silent authentication on each computer.
Open the Windows Settings and search Internet Options.
The following window opens.
Click Local intranet > Sites.
Click Advanced.
Enter the tenant specific URL into the Websites text box.
Click Close.
As far as I can tell and from what I have read, Edge does not support Integrated Windows authentication; at least as of version 42.17134.1098.0.

Implement SSO using IdentityServer4

I was implement the Identity management server by help of the documentation.
I am running the following applications:
I run the Identity server
I run the API
I run the MVC client
My MVC client gets opened in a Chrome browser. After open I click on Login and provide username and password and click submit. I got successfully logged in and it redirects me to the home page.
The problem is, after I open open another Chrome window, then I try to open the MVC Client and it asks me again to login. How can I solve this?
If you are running the MVC client from the Visual Studio debugger, it creates a brand new browser session (no old cookies, application data etc.). As IdentityServer is keeping the logged user information in a cookie, by running your application like this, you are loosing this cookie, and this is why you are forced to re-login.
I recommend you to deploy your MVC client to a local IIS site and try again. You will see that no such issue occurs (as long as you are not opening the site in an incognito mode of course).

Setting Auto Proxy in Force.com IDE behind VPN

I work remotely, so I always have to connect to COrporate VPN.
I'm having issues with proxy setting that are needed for Force.com IDE.
I was able to access Salesforce.com both sandboxes and production from IE, Chrome or firefox, but not able to connect using force.com IDE/Eclipse.
I tried to check for proxy settings in Internet Options, but all I can see is "Automatically Detect Settings" is selected and nothing else.
I tried calling my company helpdesk and they are asking me to call either Salesforce/Eclipse teams to find what is wrong with it. :)
So not sure how to get proxy host and port details.
Go to “Window –> Preferences”
Preferences box prompt out, choose “Network Connections”
Select “Manual” from Action Provider drop down list
Select Http in the List and click “Edit” button
Fill in the proxy server host and port number, (fill in the username and
password if any)
Ok, Done.

Windows authentication with Eclipse

I use Eclipse daily for software development and those of you that use it know that you download plugins and updates regularly. The company I work for has Bluecoat installed, which blocks all of the updates. However, the update URLs are not blocked in Internet Explorer. With this said, the problem seems to be that Eclipse is not using Windows authentication when it requests updates from the URLs. Is there a way to set Eclipse up so that it acts like IE?
That could be linked to the proxy and not to Bluecoat:
If IE does authorized the access to update URLs, it must do so through an authenticated proxy connection.
If you do have such a setting (proxyname:port , user/password), you should report that setting on your eclipse, in order for p2 within that eclipse to use those same settings.
(Menu Preferences : General / Network Connections)