Enable Integrated Windows Authentication (IWA) | Mozilla FirefoxDescriptionUsers are presented with a prompt to enter the credentials instead of using the active SAML session established through WIndows login. Configuration: Authentication context for SAML2.0 configured to use Windows-based authentication. From Multi-Provider SSO > Identity Providers.On SAML2 Update1 IdP recordThe AuthnContextClassRef method that we will be included in our SAML 2.0 AuthnRequest to the Identity Provider is set to urn:federation:authentication:windows. Reference: https://docs.servicenow.com/csh?topicname=t_SupportKerberosAuthentication.html&version=latest Expected result: With Kerberos, a SAML session is already active through an established Windows login, so the user does not need to authenticate with the IdP. Behavior observed: The user is been prompted to enter the credentials from the IDP on the Mozilla Firefox Browser.Release or EnvironmentAll releases.CauseIntegrated Authentication with Kerberos requires that the browser being used to access the site be configured to retrieve the currently logged in user from the client machine.ResolutionFollow the instructions below to enable Integrated Windows Authentication(IWA) on a Firefox Browser. Firefox Version less than 13.0. Type about:config on the address bar.In the filter search for ntlm.Double click network.automatic-ntlm-auth.trusted-uris.In the following prompt which comes up after the above step type a list of servers you want to allow, separated by a comma and a space.Click Ok. in the filter search for negotiate-authDouble click on network.negotiate-auth.trusted-urisSet the same value as above.Click OK. Restart Firefox. Firefox version greater than 13.0. In the Address bar type about:configIn the search/filter field type ntlmSet network.automatic-ntlm-auth.trusted-uris to .company_name.comSet network.automatic-ntlm-auth.allow-non-fqdn to true by right-clicking and selecting "toggle"In the search/filter field type negotiate.Set network.negotiate-auth.trusted-uris to .company_name.comSet network.negotiate-auth.allow-non-fqdn to true by right-clicking and selecting "toggle"Click OK if present.Restart Firefox. Additional InformationPlease refer the below document for the settings needed to enable Integrated Windows Authentication on Internet Explorer 11. https://support.servicenow.com/kb_view.do?sysparm_article=KB0596730