browser private window activation condition

[Timo Tunturi]

On 18/02/2025 15.29, Cantor, Scott wrote:
> Short of that, I can't see any obvious way it could be done unless relying on the browser sending a custom header is an option (i.e. having the users themselves actually adjust things on their end with a browser add-on).

This is what I ended up doing and it works but it can be a bit daunting 
for many people to create dedicated browser profiles, install add-ons, 
configure them and all that stuff. Many people who have admin privileges 
in some specific service aren't really computer oriented people generally.

The way private browsing in Firefox and incognito in Linux Chrome work 
is a good option for people who only need to log in as admins 
occasionally. If private windows in "all browsers on all platforms" 
could be detected and have SPNEGO disabled it would be a good feature 
for the occasional user:

+ easy to set up; just launch a private window
- tabs are not restored upon browser restarts which is quite often these 
days due to updates
- this use hijacks the use of incognito windows from what they are 
actually meant for

The custom header (I am using user-agent manipulation) way is better in 
every other aspect except it is more time-consuming to set up. 
Definitely worth it if you use admin accounts frequently.

-- Timo