No proxy account was set for user

To configure your browser for Windows Integrated Authentication (automatic login using your Windows credentials), follow the instructions below.

These instructions apply to Microsoft Edge, Google Chrome, and Mozilla Firefox on Windows.

1. Open Windows Internet Options (Microsoft Edge and Google Chrome)

Microsoft Edge and Google Chrome use Windows security settings for Integrated Windows Authentication. You do not need to open Internet Explorer to configure these settings.

1. Press Windows + R to open the Run dialog.
2. Enter the following command and press Enter:

inetcpl.cpl

This opens the Internet Properties window.

2. Add the Pyramid website to the Local intranet or Trusted sites zone

1. In Internet Properties, select the Security tab.
2. Select Local intranet (recommended for internal Pyramid websites).
3. Click Sites, then Advanced.
4. Enter your Pyramid website address, for example https://pyramid.company.com, and click Add.
5. Click Close, then OK.

Alternatively, the website can be added to Trusted sites if required by your organization's configuration.

3. Enable automatic login using Windows credentials

1. In Internet Properties > Security, select the zone where you added the Pyramid website (Local intranet or Trusted sites).
2. Click Custom level.
3. Scroll to User Authentication > Logon.
4. Select Automatic logon with current user name and password.
5. Click OK to save the changes.

Note: For the Local intranet zone, the default Automatic logon only in Intranet zone setting can also be used.

4. Verify Integrated Windows Authentication is enabled

1. In Internet Properties, select the Advanced tab.
2. Scroll down to the Security section.
3. Verify that Enable Integrated Windows Authentication is checked.
4. Click Apply, then OK.
5. Close and reopen your browser, then try accessing Pyramid again.

5. Mozilla Firefox configuration

Unlike Microsoft Edge and Google Chrome, Firefox uses its own configuration settings for Integrated Windows Authentication.

If Firefox continues to prompt for credentials, follow these steps:

1. Open Mozilla Firefox.
2. Enter about:config in the address bar and press Enter.
3. If prompted, click Accept the Risk and Continue.
4. Search for network.negotiate-auth.trusted-uris.
5. Edit the preference and enter your Pyramid server hostname, for example pyramid.company.com.
6. Search for network.automatic-ntlm-auth.trusted-uris.
7. Edit this preference and enter the same Pyramid server hostname.
8. Save the changes and restart Firefox.

Note: If multiple hostnames are required, separate them with commas. These settings may also be managed centrally by your organization's IT department using Group Policy.

6. Verify the HTTP Service Principal Name (SPN)

If users are still prompted for credentials, verify that the correct HTTP Service Principal Name (SPN) is registered in Active Directory for the Pyramid website.

SPNs are required for Kerberos authentication and must be associated with the correct account running the HTTP service.

Open Command Prompt on a domain-connected machine and check for an existing SPN:

setspn -Q HTTP/pyramid.company.com

If the required SPN does not exist, an authorized Active Directory administrator can register it using the following commands:

setspn -S HTTP/pyramid.company.com ServerName$
setspn -S HTTP/pyramid ServerName$

Replace:

• pyramid.company.com with the fully qualified hostname used to access Pyramid.
• pyramid with the short hostname, if users access Pyramid using that name.
• ServerName$ with the appropriate Active Directory computer account.

Important: If the HTTP service runs under a dedicated Active Directory service account, register the SPN against that account instead of the server computer account.

SPNs must be unique in Active Directory. The setspn -S option checks for duplicates before registration. Do not create or modify SPNs without confirming the correct service account.

7. Additional troubleshooting

If Windows Authentication still does not work:

• Verify that Windows Authentication is correctly configured and enabled in Pyramid.
• Confirm that the client computer is connected to the corporate network or VPN and can communicate with the required Active Directory services.
• Verify that the Pyramid website is listed in the correct Windows security zone, or in Firefox's authentication preferences.
• Check that the HTTP SPN is correctly registered and does not have duplicates.
• Check whether browser policies managed by your IT department override local authentication settings.
• Close and reopen the browser, then test again.

If the issue persists, please contact Pyramid Support for further assistance.