SOLVED

Credential passthrough failing to local intranet site running in IE Mode on Edge first run

%3CLINGO-SUB%20id%3D%22lingo-sub-1193085%22%20slang%3D%22en-US%22%3ECredential%20passthrough%20failing%20to%20local%20intranet%20site%20running%20in%20IE%20Mode%20on%20Edge%20first%20run%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1193085%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20we%20run%20Edge%20for%20the%20first%20time%20under%20a%20user%20account%20credential%20passthrough%20doesn't%20work.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20running%20Edge%20Stable%2080.0.361.56%20on%20Windows%2010%20Pro%201903.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOur%20opening%20page%20for%20Edge%20in%20our%20environment%20is%20an%20intranet%20page.%20The%20first%20time%20a%20user%20opens%20edge%20under%20their%20account%20they%20are%20met%20with%20a%20credentials%20prompt%20to%20access%20this%20intranet%20page.%20If%20the%20user%20then%20closes%20the%20credentials%20prompt%20we%20get%20a%20'This%20page%20isn't%20working%20at%20the%20moment'%20error%20message.%20This%20Intranet%20page%20should%20be%20running%20in%20IE%20mode%20but%20i%20assume%20because%20the%20page%20can't%20load%20without%20the%20user%20signing%20in%20it%20doesn't%20seem%20to%20reach%20the%20point%20that%20it%20opens%20in%20IE%20mode.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20configured%20the%20following%20GPO%20to%20get%20credentials%20passing%20through%20to%20the%20required%20page%3A%26nbsp%3B%20Microsoft%20Edge%5CHTTP%20Authentication%5CSpecifies%20a%20list%20of%20servers%20that%20Microsoft%20Edge%20can%20delegate%20user%20credentials%20to.%20This%20is%20enabled%20with%20domain.co.uk%20as%20the%20entry.%20The%20address%20for%20the%20site%20is%20intranet.domain.co.uk%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20solution%20does%20work%20after%20some%20time%20has%20passed%20(5%20minutes)%2C%20just%20not%20initially%20on%20first%20run.%20The%20problem%20is%20the%20first%20thing%20our%20users%20are%20going%20to%20see%20when%20they%20open%20Edge%20is%20a%20credentials%20prompt%20with%20an%20error%20after%20it%20saying%20the%20page%20can't%20be%20accessed%2C%20when%20they%20are%20used%20to%20IE%20passing%20the%20credential%20through.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20i%20set%20something%20up%20wrong%3F%20Or%20is%20this%20is%20a%20bug%3F%20Is%20it%20related%20to%20this%20page%20being%20set%20to%20open%20in%20IE%20mode%3F%20There%20are%20a%20few%20quirky%20issues%20like%20this%20that%20are%20stopping%20us%20from%20rolling%20Edge%20out%20at%20the%20moment%20so%20any%20feedback%20would%20be%20welcome!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1195519%22%20slang%3D%22en-US%22%3ERe%3A%20Credential%20passthrough%20failing%20to%20local%20intranet%20site%20running%20in%20IE%20Mode%20on%20Edge%20first%20run%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1195519%22%20slang%3D%22en-US%22%3E%3CP%3EOkay%20so%20two%20things%20led%20me%20to%20resolving%20this%20issue%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFirst%2C%20i%20had%20to%20specify%20the%20server%20name%20on%202%20GP%20settings%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAdministrative%20Templates%2FMicrosoft%20Edge%2FHTTP%20authentication%2FSpecifies%20a%20list%20of%20servers%20that%20Microsoft%20Edge%20can%20delegate%20user%20credentials%20to%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EAdministrative%20Templates%2FMicrosoft%20Edge%2FHTTP%20authentication%2FConfigure%20list%20of%20allowed%20authentication%20servers%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThis%20then%20got%20credentials%20passing%20through.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EWhat%20muddied%20the%20waters%20on%20this%20one%20was%20that%20first%20credential%20pass%20through%20wasn't%20working%2C%20but%20also%20there%20was%20a%20delay%20of%20a%20few%20minutes%20from%20first%20run%20and%20the%20websites%20in%20question%20being%20opened%20in%20IE%20mode.%20I%20imagine%20a%20page%20running%20in%20IE%20mode%20doesn't%20take%20note%20of%20the%20edge%20settings%20about%20passing%20credentials%20and%20was%20just%20passing%20the%20credentials%20through%20as%20it%20normally%20worked%20in%20IE.%20This%20gave%20the%20impression%20that%20it%20was%20a%20first%20run%20issue.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EHope%20this%20helps%20someone%20dealing%20with%20similar%20issues!%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi all,

 

When we run Edge for the first time under a user account credential passthrough doesn't work. 

 

We are running Edge Stable 80.0.361.56 on Windows 10 Pro 1903. 

 

Our opening page for Edge in our environment is an intranet page. The first time a user opens edge under their account they are met with a credentials prompt to access this intranet page. If the user then closes the credentials prompt we get a 'This page isn't working at the moment' error message. This Intranet page should be running in IE mode but i assume because the page can't load without the user signing in it doesn't seem to reach the point that it opens in IE mode.

 

We configured the following GPO to get credentials passing through to the required page:  Microsoft Edge\HTTP Authentication\Specifies a list of servers that Microsoft Edge can delegate user credentials to. This is enabled with domain.co.uk as the entry. The address for the site is intranet.domain.co.uk

 

This solution does work after some time has passed (5 minutes), just not initially on first run. The problem is the first thing our users are going to see when they open Edge is a credentials prompt with an error after it saying the page can't be accessed, when they are used to IE passing the credential through.

 

Have i set something up wrong? Or is this is a bug? Is it related to this page being set to open in IE mode? There are a few quirky issues like this that are stopping us from rolling Edge out at the moment so any feedback would be welcome!

 

 

1 Reply
best response confirmed by elltommo (Occasional Contributor)
Solution

Okay so two things led me to resolving this issue:

 

First, i had to specify the server name on 2 GP settings:

 

Administrative Templates/Microsoft Edge/HTTP authentication/Specifies a list of servers that Microsoft Edge can delegate user credentials to

Administrative Templates/Microsoft Edge/HTTP authentication/Configure list of allowed authentication servers

 

This then got credentials passing through.

 

What muddied the waters on this one was that first credential pass through wasn't working, but also there was a delay of a few minutes from first run and the websites in question being opened in IE mode. I imagine a page running in IE mode doesn't take note of the edge settings about passing credentials and was just passing the credentials through as it normally worked in IE. This gave the impression that it was a first run issue.

 

Hope this helps someone dealing with similar issues!