Link to home
Start Free TrialLog in
Avatar of R M
R M

asked on

SSO failing in chrome Chrome Prompts for Credentials

Chrome Prompts for Credentials. we have ADFS SSO running in our environment. Previously it was working fine in IE/Chrome/Edge suddenly ten days before team noticed that the sites are asking for credentials. we fixed in Edge by adding the ADFS site to Intranet site in IE but issues with Chrome still persists.

when open sharepoint site, a dialog box comes saying ADFS site asking for Credentials.

on checking the sharepoint in chrome, we see the FedAuth cookie for the site is showing to Expire as the browsers session Ends, Not sure if this is the issue.

No recent patches done. Patching was done almost three weeks before.

Any suggestions are highly appreciated.
Avatar of footech
footech
Flag of United States of America image
You may need to add "Mozilla/5.0" to the list for WIASupportedUserAgents on your ADFS.
$UserAgents = Get-AdfsProperties | Select -ExpandProperty WIASupportedUserAgents
# verify $UserAgents doesn't already have "Mozilla/5.0" before continuing
$UserAgents += "Mozilla/5.0"
Set-ADFSProperties -WIASupportedUserAgents $UserAgents

Open in new window


According to this page, https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-intranet-forms-based-authentication-for-devices-that-do-not-support-wia you may also be able to add "Chrome" instead of "Mozilla/5.0".
SOLUTION
Avatar of R M
R M
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Avatar of R M
R M
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of footech
footech
Flag of United States of America image
Microsoft recommended that?  Did you already test and it resolved the issue?

I just tested with latest Chrome, and we're not encountering any issues with using SSO w/ ADFS to login, so I'm not sure what could be the issue in your environment.
Avatar of R M
R M

ASKER

Yeah even I was wondering on that. Since the person engaged with MS from our end said issue fixed on following that even MS readily closed it out.

I knew there are environments running fine with ADFS and having no extensions added.