All versions of Centrify Identity Service Windows Server 2016 on
Firefox version 52Problem:
Users correctly configured IWA settings as instructed in the following articles:
However, users failed to sign in to User Portal via IWA with Windows Server 2016 on Firefox 52. IWA is successful on previous Firefox versions, other browsers and servers. Cause:
This is related to a Firefox bug as stated in:
Please apply one of the following 3 possible workarounds:
1. Changing settings in the Firefox Configuration Editor. In the about:config page, set the value of network.http.spdy.enabled.http2 to 'false'. After restarting the Firefox browser, IWA would work.
2. Alternatively, this can be fixed by editing the registry settings on Windows Server 2016. After starting the Windows Registry Editor, navigate to the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters. A new REG_DWORD values should be added: EnableHttp2Tls. The value should be set to ‘0’.
After rebooting the Windows Server 2016, IWA would work.
Please check with Mozilla to understand the fix target of this issue, by then such registry change should be undone.
3. Another option would be rolling back to Firefox 51 or earlier versions, or switching to another browser such as Google Chrome or Internal Explorer.