Share via


AuthNegotiateDelegateAllowlist

Specifies a list of servers that Microsoft Edge can delegate user credentials to

Supported versions

  • On Windows and macOS since 77 or later

Description

Configure the list of servers that Microsoft Edge can delegate to.

Separate multiple server names with commas. Wildcards (*) are allowed.

If you don't configure this policy Microsoft Edge won't delegate user credentials even if a server is detected as Intranet.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: No - Requires browser restart
  • Per Profile: No
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • String

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: AuthNegotiateDelegateAllowlist
  • GP name: Specifies a list of servers that Microsoft Edge can delegate user credentials to
  • GP path (Mandatory): Administrative Templates/Microsoft Edge/HTTP authentication
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

contoso.com

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: AuthNegotiateDelegateAllowlist
  • Value type: REG_SZ

Example registry value

contoso.com

Mac information and settings

  • Preference Key name: AuthNegotiateDelegateAllowlist
  • Example value:
<string>contoso.com</string>

See also