Symptoms
There are the following symptoms when Single Sign-On works correctly for Subversion clients while Firefox continues to prompt users for their credentials:
- Integrated Windows Authentication is enabled in VisualSVN Server.
- Users can access VisualSVN Server repositories using Subversion clients (such as svn.exe or TortoiseSVN) without being prompted for username and password.
- Users are prompted for username and password when they access VisualSVN Server repositories using Firefox.
Cause
This problem is caused by the fact that Firefox automatically sends user's credentials only to explicitly allowed sites. Firefox maintains a whitelist of sites allowed for automatic authentication and this list is empty by default.
Whitelist of sites allowed for automatic authentication is stored in the network.negotiate-auth.trusted-uris value in the Firefox's settings.
Resolution
In order to enable VisualSVN Server Single Sign-On in Firefox, perform the following steps:
- Open Firefox.
- Navigate to the about:config.
- Firefox 3.x and later requires you to agree that you will proceed with caution.
- Locate and double-click the network.negotiate-auth.trusted-uris option.
- Enter the URI of your VisualSVN Server (i.e. https://svn.example.com). Multiple sites can be delimited by commas.
- Click the OK button.
Then your server will be added to whitelist of sites allowed for automatic authentication and you will be able to access your VisualSVN Server with Single Sign-On.