SOLVED

Ambient Authentication has been added to Edge for InPrivate and Guest sessions

MVP

Microsoft Edge Version 82.0.442.0 (Official build) canary (64-bit)

 

the 2 new flags edge://flags/

 

Enable Ambient Authentication in InPrivate mode

Enables ambient authentication in InPrivate mode. This flag may be overriden by policies. – Mac, Windows

#enable-ambient-authentication-in-incognitoEnabled

 

 

Enable Ambient Authentication in Guest session

Enables ambient authentication in Guest session. This flag may be overriden by policies. – Mac, Windows

#enable-ambient-authentication-in-guest-session

 

 

If I'm right, it's supposed to facilitate sign-ins while in InPrivate mode or browsing in Guest session.

 

trying to sign in to my Microsoft account or Office 365 account in either of those modes, I didn't notice any difference.

so any further info about these flags and how they exactly work is appreciated, thank you

 

2 Replies
best response confirmed by HotCakeX (MVP)
Solution

@HotCakeX As documented in https://textslashplain.com/2019/05/01/edge-76-vs-edge-18-vs-chrome/,

In Edge76, Edge18, and Firefox, running the browser in InPrivate mode disables automatic Integrated Windows Authentication. Chrome and Internet Explorer do not disable automatic authentication in private mode. You can disable automatic authentication in Chrome by launching it with a command line argument: chrome.exe --auth-server-whitelist="_"

 

These flags revert that change, such that Windows Integrated Authentication mechanisms (NTLM, Negotiate/Kerberos) will automatically respond to authentication challenges from configured sites even while the browser is running in a Guest or InPrivate session.

1 best response

Accepted Solutions
best response confirmed by HotCakeX (MVP)
Solution

@HotCakeX As documented in https://textslashplain.com/2019/05/01/edge-76-vs-edge-18-vs-chrome/,

In Edge76, Edge18, and Firefox, running the browser in InPrivate mode disables automatic Integrated Windows Authentication. Chrome and Internet Explorer do not disable automatic authentication in private mode. You can disable automatic authentication in Chrome by launching it with a command line argument: chrome.exe --auth-server-whitelist="_"

 

These flags revert that change, such that Windows Integrated Authentication mechanisms (NTLM, Negotiate/Kerberos) will automatically respond to authentication challenges from configured sites even while the browser is running in a Guest or InPrivate session.

View solution in original post