SPNEGO unavailability and error handling

Daniel Lutz daniel.lutz at switch.ch
Fri Sep 27 02:24:49 EDT 2019

Wessel, Keith [26.09.19 22:50]:
> 1. The wiki is pretty clear about the potential negative user experience in Internet Explorer for users on devices not joined to the domain. It doesn't mention the user experience in other browsers, though. Does anyone know if other browsers simply report SPNEGO being unavailable and the IdP immediately displays the spnego-unavailable template?

Other browsers like Firefox, Chrome and Safari are not affected. They
just return an "Unauthorized" error to the IdP, so the IdP can handle
this cleanly. (I've just put a short note to the documentation in the
section "Configuration of an Activation Condition".)

I don't know if Edge is affected, I can't test this myself.

Does anyone else have experience with the SPNEGO login flow and the Edge


More information about the users mailing list