3760970 - SPNEGO authentication on IAS shows credentials popup

Symptom

When logging in with SPNEGO (Kerberos-based single sign-on) through SAP Cloud Identity Services – Identity Authentication (IAS), the browser shows an unexpected credentials popup instead of completing the single sign-on.

*Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.*

Environment

SAP Cloud Identity Services – Identity Authentication

Keywords

SPNEGO, Kerberos, Single Sign-On (SSO), Windows SSO, Kerberos SSO, SPNEGO SSO, browser SSO, SAP Identity Authentication Service (IAS), SAP Cloud Identity Services (SCI), Active Directory (AD), Microsoft Entra ID, credentials popup, authentication popup, login prompt, repeated login prompt, password prompt, credentials challenge, Windows Authentication, Integrated Windows Authentication (IWA), seamless authentication, silent login, automatic logon, Negotiate authentication, Local Intranet Zone, Intranet Zone, Internet Options (inetcpl.cpl), browser configuration, domain-joined device, Windows, Microsoft Edge, Internet Explorer, Kerberos token, SPNEGO negotiation, Kerberos handshake, SPNEGO rejection, authentication failure, accounts.ondemand.com , KBA , BC-IAM-IDS , Identity Authentication Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.