Authentication

Configure sites that support integrated authentication. See Integrated authentication for more information.

Values

• SPNEGO: A list of sites permitted to use SPNEGO (Kerberos) authentication.
• Delegated: A list of sites permitted to use Kerberos delegation.
• NTLM: A list of sites permitted to use NTLM authentication.
• AllowNonFQDN: Allows authentication for hosts that are not fully qualified domain names. Accepts SPNEGO and NTLM, each a boolean.
• AllowProxies: Allows authentication to proxies. Accepts SPNEGO and NTLM, each a boolean.
• PrivateBrowsing: Set to true to allow integrated authentication in private browsing.
• Locked: Prevents the user from changing these settings. Unlike most policies, this defaults to true. Set it to false to apply the values as defaults that users can still change.

Examples

policies.json

{
  "policies": {
    "Authentication": {
      "SPNEGO": [
        "mydomain.com",
        "https://myotherdomain.com"
      ],
      "Delegated": [
        "mydomain.com",
        "https://myotherdomain.com"
      ],
      "NTLM": [
        "mydomain.com",
        "https://myotherdomain.com"
      ],
      "AllowNonFQDN": {
        "SPNEGO": true,
        "NTLM": true
      },
      "AllowProxies": {
        "SPNEGO": true,
        "NTLM": true
      },
      "Locked": true,
      "PrivateBrowsing": true
    }
  }
}

JSON schema

Authentication JSON schema

{
  "type": "object",
  "properties": {
    "SPNEGO": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "Delegated": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "NTLM": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "AllowNonFQDN": {
      "type": "object",
      "properties": {
        "SPNEGO": {
          "type": "boolean"
        },
        "NTLM": {
          "type": "boolean"
        }
      }
    },
    "AllowProxies": {
      "type": "object",
      "properties": {
        "SPNEGO": {
          "type": "boolean"
        },
        "NTLM": {
          "type": "boolean"
        }
      }
    },
    "Locked": {
      "type": "boolean"
    },
    "PrivateBrowsing": {
      "type": "boolean"
    }
  }
}

Windows (GPO)

Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0

macOS

<dict>
  <key>Authentication</key>
  <dict>
    <key>SPNEGO</key>
    <array>
      <string>mydomain.com</string>
      <string>https://myotherdomain.com</string>
    </array>
    <key>Delegated</key>
    <array>
      <string>mydomain.com</string>
      <string>https://myotherdomain.com</string>
    </array>
    <key>NTLM</key>
    <array>
      <string>mydomain.com</string>
      <string>https://myotherdomain.com</string>
    </array>
    <key>AllowNonFQDN</key>
      <dict>
      <key>SPNEGO</key>
      <true/> | <false/>
      <key>NTLM</key>
      <true/> | <false/>
    </dict>
    <key>AllowProxies</key>
      <dict>
      <key>SPNEGO</key>
      <true/> | <false/>
      <key>NTLM</key>
      <true/> | <false/>
    </dict>
    <key>Locked</key>
    <true/> | <false/>
    <key>PrivateBrowsing</key>
    <true/> | <false/>
  </dict>
</dict>

Compatibility

	Firefox	Firefox ESR	Firefox Enterprise
Authentication	Available since 6060	Available since 6060	Available since 149149
AllowNonFQDN	Available since 6262	Available since 60.260.2	Available since 149149
AllowProxies	Available since 7070	Available since 68.268.2	Available since 149149
Locked	Available since 7171	Available since 68.368.3	Available since 149149
PrivateBrowsing	Available since 7777	Available since 68.968.9	Available since 149149

CCK2 Equivalent: N/A
OMA-URI: Authentication
Preferences Affected: network.negotiate-auth.trusted-uris,network.negotiate-auth.delegation-uris,network.automatic-ntlm-auth.trusted-uris,network.automatic-ntlm-auth.allow-non-fqdn,network.negotiate-auth.allow-non-fqdn,network.automatic-ntlm-auth.allow-proxies,network.negotiate-auth.allow-proxies,network.auth.private-browsing-sso

See also

• Integrated authentication