You can configure Internet Explorer to support user authentication when using a Kerberos Adapter instance.
-
Add the base URL to Local intranet.
Note:
Skip this step if the base URL <pf-idp.domain.name> is internal and not fully qualified. For example, if the base URL is
pingfederate
, you can skip this step. However, if <pf-idp.domain.name> iswww.example.com
, then you must add the base URL to the Sites list, as described in the following sub steps.- Close all Internet Explorer tabs and windows.
- Open Control Panel > Internet Options.
- Click the Security tab.
- Select Local intranet, and then click Sites.
- Click Advanced.
-
Enter the base URL. For example,
www.example.com
, and then click Add. - Click Close. Click OK to return to the Security tab.
-
Verify Automatic logon only in the Intranet zone is
selected.
- Under the Security tab, select Local intranet and then click Custom level.
- Verify Automatic logon only in the Intranet zone is selected in the Settings pane.
- Click OK to return to the Security tab.
-
Verify proxy settings.
Note:
Skip the following sub steps if a proxy is not used.
- Click the Connections tab.
- Click LAN settings.
- Verify the Use a proxy server for your LAN ... check box is selected. Click Advanced.
- Enter the base URL in the Exceptions field. Click OK.
- Click OK to return to the Connections tab.
-
Verify Enable Integrated Windows Authentication is
selected.
- Click the Advanced tab.
- Verify Enable Integrated Windows Authentication is selected in the Settings pane.
- Click OK to close Internet Options.