To configure Internet Explorer for Kerberos authentication, review the following settings in Internet Options.

  1. Add the base URL to Local intranet.
    Note:

    This step may be skipped if the base URL (<pf-idp.domain.name>) is internal and not fully qualified. For example, if it is pingfederate, you can skip this step. However, if <pf-idp.domain.name> is www.example.com, then you must add the base URL to the Sites list, as described in the following sub steps.

    1. Close all Internet Explorer tabs and windows.
    2. Open Control Panel > Internet Options.
    3. Click the Security tab.
    4. Select Local intranet and click Sites.
    5. Click Advanced.
    6. Enter the base URL (for example, www.example.com), and then click Add.
    7. Click Close, and then click OK to return to the Security tab.
  2. Verify Automatic logon only in the Intranet zone is selected.
    1. Under the Security tab, select Local intranet and click Custom level.
    2. Verify Automatic logon only in the Intranet zone is selected in the Settings pane.
    3. Click OK to return to the Security tab.
  3. Verify proxy settings.
    Note:

    Skip the following sub steps if a proxy is not used.

    1. Click the Connections tab.
    2. Click LAN settings.
    3. Verify the Use a proxy server for your LAN ... check box is selected, and then click Advanced.
    4. Enter the base URL in the Exceptions field, and then click OK.
    5. Click OK to return to the Connections tab.
  4. Verify Enable Integrated Windows Authentication is selected.
    1. Click the Advanced tab.
    2. Verify Enable Integrated Windows Authentication is selected in the Settings pane.
  5. Click OK to close Internet Options.