In recent Microsoft Edge browser versions 90+, the classic authentication dialog has been replaced by Windows Hello authentication prompt. It's all nice and secure, but at the moment at least, browser password vault extensions such as 1Password cannot fill in the credentials to that modern prompt. What it means is that you need to close the Windows Hello prompt, open password extension, copy username/password to notepad, refresh browser window, paste credentials from notepad to Windows Hello prompt. *yawn*
This is cumbersome in enterprise scenarios with various internal systems such as SharePoint that in specific scenarios require you to login with different credentials from the one you're currently logged into Windows.
For now the only solution is to disable the Windows Hello prompt in Edge. It will require using Group Policies wither on AD level, or on individual machine. The following steps are for individual machine, but if you're an AD admin, you can pick the essential pieces from the instructions and do the same on AD level policy.
- First download MS Edge policy file from https://aka.ms/EdgeEnterprise, from the drop-downs, select the version of your Edge, then press GET POLICY FILES
- Extract the .cab, and .zip 🙄
- Navigate to .\MicrosoftEdgePolicyTemplates\windows\admx folder
- Copy msedge.admx to C:\Windows\PolicyDefinitions
- Navigate to .\MicrosoftEdgePolicyTemplates\windows\admx\en-US folder (NOTE! or the language of your Windows installation, if not en-US)
- Copy msedge.adml to C:\Windows\PolicyDefinitions\en-US
- Open Local Group Policy Editor, and navigate to Computer Configuration / Administrative Templates / Microsoft Edge / HTTP Authentication
- Edit Windows Hello For HTTP Auth Enabled setting, and set it to Disabled
- Click OK to confirm policy setting, and refresh page in Edge - no restart of any kind needed
- Applauds! Classic authentication prompt is back and you can also access the browser extension
Post a Comment