The PingFederate Integrated Windows Authentication (IWA) adapter supports the Kerberos and NTLM authentication protocols, though some browsers must be configured to use them. These settings are configured manually on each computer, except in a Windows Enterprise environment, where they are managed by Group Policy.

Within Group Policy there are two configuration subsets available: policies and preferences. Policies and preferences are applied through Group Policy Objects (GPOs) for the following browser configurations:

  • Internet Explorer
  • Google Chrome
  • Mozilla Firefox

Policies typically configure system-specific settings such as Windows operating system, security, and software settings. When the GPO falls out of scope, Group Policy Preference settings remain the same. In Policies, the defined settings supersede the local system or user settings. When they fall out of scope, the local settings revert to the previous settings.