To enable IWA using Internet Explorer:

1. Select Internet options in the Tools drop-down menu.

2. On the Advanced tab under Security, select Enable Integrated Windows Authentication*.

3. On the Security tab, click Local intranet > Sites > Advanced.

4. Add the SSO domain.
5. Click Close.

Enabling IWA on Mozilla Firefox depends on your OS.

To enable IWA on Mozilla Firefox for Windows:

1. Start about:config:
   1. In the URL field, enter about:config and press Enter.
   2. Click Accept the Risk and Continue.
2. Configure network.negotiate-auth.trusted-uris:
   1. In the Search preference name field, enter negotiate.
   2. Click the Edit icon for network.negotiate-auth.trusted-uris.
   3. Add the SSO domain.
   4. Press Enter or click the checkmark.

3. Configure network.automatic-ntlm-auth.trusted-uris:
   1. In the Search preference name field, enter automatic.
   2. Click the Edit icon for network.automatic-ntlm-auth.trusted-uris.
   3. Add the SSO domain.
   4. Press Enter or click the checkmark.

To enable IWA on Mozilla Firefox for macOS:

1. Start about:config:
   1. In the URL field, enter about:config and press Enter.
   2. Click Accept the Risk and Continue.
2. Configure network.negotiate-auth.delegation-uris:
   1. In the Search preference name field, enter negotiate.
   2. Click the Edit icon for network.negotiate-auth.delegation-uris.
   3. Add the SSO domain.
   4. Press Enter or click the checkmark.

3. Configure network.automatic-ntlm-auth.trusted-uris:
   1. In the Search preference name field, enter automatic.
   2. Click the Edit icon for network.automatic-ntlm-auth.trusted-uris.
   3. Add the SSO domain.
   4. Press Enter or click the checkmark.

4. Configure network.automatic-ntlm-auth.allow-proxies:
   1. In the Search preference name field, enter automatic.
   2. Click the gray toggle for network.automatic-ntlm-auth.allow-proxies to set this value to true.

5. Configure network.negotiate-auth.allow-proxies
   1. In the Search preference name field, enter negotiate.
   2. Click the gray toggle for network.negotiate-auth.allow-proxies to set this value to true.

For Windows and macOS, IWA is automatically enabled on Google Chrome and this function is allowlist-driven. The only way to change the policy is through the command prompt (Windows) or terminal window (macOS).

To change the policy in Windows:

1. Enter cmd into the search field on your taskbar to start the command prompt.
2. Configure the allowlist using the following command-line parameter:

--auth-server-whitelist="https://www.example.com".

Use a comma to separate between multiple domains.

To change the policy in macOS:

1. Start the terminal application.
2. Create a Kerberos ticket for the account using the following command: kinit username@example.com.
3. Replace username@example.com with your username and domain. When prompted, enter your password.
4. Configure the allowlist using the following command-line parameter:
   $ defaults write com.google.Chrome AuthServerWhitelist "httpsL//www.example.com, https://www.example2.net, https://www.example3.org".

Use a comma to separate between multiple domains.

For Mac devices running OS X, IWA is enabled automatically for Safari.

To enable IWA on Microsoft Edge:

1. In the Windows Control Panel, select Network and Internet > Internet Options.
2. Click the Security tab and click Local Intranet > Sites.
3. Click Advanced.

4. In the Add this website to the zone field, enter the SSO domain.
5. Click Add.
6. Click Close.