chrome IWA

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

We are upgrading siteminder to 12.7 for TIP customer. While Enabled  IWA (Windows Autehntication. With Google Chrome the IWA Windows
authentication is not working as expected.

 

Environment

  Policy server 12.7SP0CR00 on windows 2012;
  Access Gateway Server 12.7SP0CR00 on Windows 2012;
 

Resolution

You have to configure Google Chrome with those parameters :

auth-server-whitelist
auth-negotiate-delegatewhitelist
auth-schemes

In order to test the settings, you can launch the browser by the command line 

c:\> start /B chrome --disable-plugins --process-per-site -auth-server-whitelist="myserver1.mydomain.com, myserver2.mydomain.com, myserver3.mydomain.com, myserver4.mydomain.com" -auth-negotiate-delegatewhitelist="myserver1.mydomain.com, myserver2.mydomain.com, myserver3.mydomain.com, myserver4.mydomain.com" -auth-schemes="digest,ntlm,negotiate" http://myserver1.mydomain.com/mysite/index.htm