I’m not a psychologist, but I do know how to make Windows Integrated Authentication work with Internet Explorer. Single Sign-on reduces prompt fatigue in people and thus makes them more aware of the moments when password prompts happen and (and this is the theory…) paying more attention to what they are doing with their passwords. In the next part we look at the Trusted Sites zone.Īdding URLs to the Local Intranet zone for Internet Explorer, also applies to Microsoft Edge.Īctive Directory Federation Services (AD FS), and certain functionality in Azure Active Directory leverage Windows Integrated Authentication to allow for Single Sign-on. In this part we look at the Local Intranet zone. This is the first part for adding Microsoft Cloud URLs to Internet Explorer’s zone.
In this part of the series, we’ll look at the required Hybrid Identity URLs that you want to add to the Intranet Sites list in Internet Explorer. In this series, labeled Hardening Hybrid Identity, we’re looking at hardening these implementations, using recommended practices. Most Microsoft-based Hybrid Identity implementations use Active Directory Federation Services (AD FS) Servers, Web Application Proxies and Azure AD Connect installations.
