To enable IWA using Internet Explorer, use the following steps:

1. Click Internet Options in the Tools drop-down menu.

2. In the Advanced tab under Security, check the Enable Integrated Windows Authentication* box.

3. In the Security tab, click Local Intranet > Sites > Advanced.

4. Configure SSO on the IdP, then add the SSO domain.

Enabling IWA on Mozilla Firefox depends on your OS.

To enable IWA on Mozilla Firefox using Windows, use the following steps:

1. In the browser URL field, enter the text about:config and press enter.
2. Click Accept the Risk and Continue.
3. In the Search preference name search bar:
   1. Search for network.negotiate-auth.trusted-uris.
   2. Click the pencil icon to edit.
   3. Add the SSO domain.
   4. Click the white checkmark or press enter.

4. In the Search preference name search bar:
   1. Search for network.automatic-ntlm-auth.trusted-uris.
   2. Click the pencil icon to edit.
   3. Add the SSO domain.
   4. Click the white checkmark or press enter.

To enable IWA on Mozilla Firefox using macOS, use the following steps:

1. In the browser URL field, enter the text about:config and press enter.
2. Click Accept the Risk and Continue.
3. In the Search preference name search bar:
   1. Search for network.negotiate-auth.delegation-uris.
   2. Click the pencil icon to edit.
   3. Add the SSO domain.
   4. Click the white checkmark or press enter.

4. In the Search preference name search bar:
   1. Search for network.automatic-ntlm-auth.trusted-uris.
   2. Click the pencil icon to edit.
   3. Add the SSO domain.
   4. Click the white checkmark or press enter.

5. In the Search preference name search bar:
   1. Search for network.automatic-ntlm-auth.allow-proxies.
   2. Click the toggle icon and set this value to true.

6. In the Search preference name search bar:
   1. Search for network.negotiate-auth.allow-proxies.
   2. Click the toggle icon and set this value to true.

For Windows and macOS, IWA is automatically enabled on Chrome, and this function is allowlist-driven. The only way to change the policy is through the Command Prompt (Windows) or Terminal window (macOS). Changing the policy in Google Chrome depends on your OS.

To change the policy in Windows, use the following steps:

1. Enter cmd into the search field on your taskbar and launch the Command Prompt.
2. Configure the allowlist using the following command-line parameter:
   --auth-server-whitelist="https://www.example.com".

Use a comma to separate between multiple domains.

To change the policy in macOS, use the following steps:

1. Launch the Terminal application.
2. Create a Kerberos ticket for the account using the following command: kinit username@example.com
3. Replace username@example.com with your actual username and domain. When prompted, enter your password.
4. Configure the allowlist using the following command-line parameter:
   $ defaults write com.google.Chrome AuthServerWhitelist "httpsL//www.example.com, https://www.example2.net, https://www.example3.org".

Use a comma to separate between multiple domains.

For Macs running OS X, IWA is enabled automatically for Safari.

To enable IWA on Microsoft Edge, use the following steps:

1. In the Windows Control Panel, select Network and Internet > Internet Options > Security > Local Intranet > Sites > Advanced.

2. In the field under Add this website to the zone, enter the SSO domain.
3. Click Add.