Bypassing Integrated Windows Authentication to access the ICA console as an alternate portal user

Products

• Information Centric Analytics

Issue/Introduction

In some environments, users are required to perform administrative actions within the Information Centric Analytics (ICA) console using an admin portal account that is distinct from their standard portal account. The ICA console does not feature a login/logout button or other means to change the logged-in user.

Environment

Release : 6.5.x

Component : Console

Cause

When Integrated Windows Authentication is enabled for browsers, users are not presented with a login prompt and can only login to ICA as the logged-on user of their active Windows session. Integrated Windows Authentication enables a client to pass Windows credentials via a browser's authorization header to a site for authentication. This feature is typically enabled for intranet sites and is controlled via Windows' Internet Options control panel.

The following browsers are controlled by this setting:

• Microsoft Internet Explorer

• Microsoft Edge

• Google Chrome

Resolution

To login to the ICA console as a user other than the signed-in user of the active Windows session without modifying the settings in the Internet Options control panel, follow this procedure:

1. Locate the Chrome or Edge executable on your computer, typically located at %systemdrive%\Program Files (x86)\Google\Chrome\Application\Chrome.exe or %systemdrive%\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2. Press and hold the Shift key while right-clicking on the executable and select Run as different user
3. Enter the credentials of the admin account you wish to use

Additional Information

Additional information on Integrated Windows Authentication can be found here:

https://docs.microsoft.com/en-us/aspnet/web-api/overview/security/integrated-windows-authentication