Windows authentication doesn't work properly on localhost

Duplicate Issue #4776778 • See Issue #4776775


Sep 29, 2015
This issue is public.
See progress on Bug #4776775
Reported by 0 people

Sign in to watch or report this issue.

Steps to reproduce


Repro Steps:

In VS 2015, create a new website with windows authentication as the authentication method. Run debug with Edge and you will see the popup. Run debug with IE or Chrome and you will see the page auto logs you in.

Expected Results:

The windows authentication pop up should not show and the site should auto login with my windows credentials

Actual Results:

Dev Channel specific:



0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Sermet I.”

      Changed Assigned To to “Venkat K.”

      Changed Assigned To from “Venkat K.” to “Crispin C.”

      Changed Status to “Confirmed”

      Changed Assigned To from “Crispin C.” to “IE S.”

      Changed Status from “Confirmed” to “Duplicate”

    • Hello,

      Thank you for providing this information about the issue. Localhost access can be used to escape browser sandboxes, and so Edge used to block it completely. However, some sites and scenarios required localhost access, and so after careful analysis, we enabled localhost for the Internet app container only. We also special-cased “localhost” as an origin to render in the Internet sandbox so that it could access localhost. A consequence of that is this bug, because WIA (Windows Integrated Authentication) is not supported on the Internet.

      A work-around for this is to
      1.      Enable loopback in the intranet app container as described here
      2.      Access your localhost machine by using its fully qualified domain.

      Best Wishes,
      The MS Edge Team

    • Let me be clear that the workaround DOES NOT WORK AT ALL.

      http://localhost/Windowsauthapp - 3 auth prompts
      http://machinename/Windowauthap - 4 auth prompts
      Chrome, Firefox & IE 11 - ZERO auth prompts on both

      Yes, I am not kidding, 4 prompts for the same app, despite loopback in the Intranet app container being enabled and the site being explicitly added to the Intranet zone in IE11. And of course, no option to remember the password.

      Edge is just a total heap of junk, and this bug is beyond ridiculous.

    You need to sign in to your Microsoft account to add a comment.

    Sign in