topic Kerberos SSO broke after Chrome update in Alfresco Forum

Kerberos SSO broke after Chrome update

brancott — Thu, 05 May 2022 07:34:36 GMT

Hi, I'm running alfresco community 5.2.0 for many years now and everything was fine until recent Chrome 101.0.4951.54 release. SSO doesn't work anymore and entering login\password manually also doesn't allow to log in, Alfresco just keeps prompting for credentials.

Does anyone has the same problem? Is there any additional setting needed now?

Re: Kerberos SSO broke after Chrome update

ARC1 — Fri, 06 May 2022 17:29:24 GMT

Thank you for posting this. I am having the same exact issue but never realized that it was a Chrome update issue. Oddly, I tried logging in with IE (which no one is using anymore) and SSO worked.

When we first setup Alfresco, SSO never worked with Edge even though it is based on Chomium now. Chrome worked after whitelisting our domain using the following register setting...

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"AuthNegotiateDelegateWhitelist"="*.companydomain.com"

There was a registry fix for Edge to whitelist the domain, but it never worked.

Do we have to Whitelist the domain in a different setting now?

Re: Kerberos SSO broke after Chrome update

ARC1 — Mon, 09 May 2022 14:23:37 GMT

Update:

Found that Google has changed the AuthNegotiateDelegateWhitelist to AuthNegotiateDelegateAllowList. I updated the registry but even though there are articles that say it fixed the issue, I have been unsuccessful using this fix.