Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-8545: How to get IWA work with Windows Server 2016 on Firefox 52

Centrify Identity Service, App Edition ,  

12 April,17 at 09:30 AM

Applies to:  All versions of Centrify Identity Service Windows Server 2016 on Firefox version 52

Problem:

Users correctly configured IWA settings as instructed in the following articles: However, users failed to sign in to User Portal via IWA with Windows Server 2016 on Firefox 52. IWA is successful on previous Firefox versions, other browsers and servers.

User-added image

User-added image 

Cause:

This is related to a Firefox bug as stated in:

 
Workaround:

Please apply one of the following 3 possible workarounds:

1. Changing settings in the Firefox Configuration Editor. In the about:config page, set the value of network.http.spdy.enabled.http2 to 'false'. After restarting the Firefox browser, IWA would work.
 
User-added image

2. Alternatively, this can be fixed by editing the registry settings on Windows Server 2016. After starting the Windows Registry Editor, navigate to the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters. A new REG_DWORD values should be added: EnableHttp2Tls. The value should be set to ‘0’.

After rebooting the Windows Server 2016, IWA would work.

Please check with Mozilla to understand the fix target of this issue, by then such registry change should be undone.
 
User-added image

User-added image

3. Another option would be rolling back to Firefox 51 or earlier versions, or switching to another browser such as Google Chrome or Internal Explorer.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.