IWA setting for Firefox browser through Group Policy Skip to main content
https://support.okta.com/help/answers?id=906f0000000xzfliao&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Parth SwadasParth Swadas 

IWA setting for Firefox browser through Group Policy

Hello Community,

We've enabled Desktop SSO for our network which is working good with Chrome, IE And Safari browsers. However to enable IWA for firefox, there is manual configuration required ( IWA hostnames for network.negotiate-auth.trusted-uris).

Can we change the firefox setting to configure the auth.trusted-uris using Group Policy?

Thanks,
Parth 
Darron HellmannDarron Hellmann (Okta)
Hi Parth

I don't see any reason why you couldn't use FireFox Group Policy to set any of the necessary tweaks for the Desktop SSO (IWA).
Parth SwadasParth Swadas
Hey Darron,

I know it's possible through group policy. But i am not windows/GPO expert, so i was looking for any useful links or any document so i get preferred/ recommended method for changes.
Polly_Old Nuth_OldPolly_Old Nuth_Old
For the Firefox change, we added it to the login script.

cd /D "%APPDATA%\Mozilla\Firefox\Profiles\*.default"
findstr /c:"user_pref(\"network\.automatic-ntlm-auth\.trusted-uris\", \"<REPLACE_WITH_YOUR_DOMAIN>\");" "prefs.js"
if %errorlevel% == 1 echo user_pref("network.automatic-ntlm-auth.trusted-uris", "<REPLACE_WITH_YOUR_DOMAIN>");>>"prefs.js"