Error Message

Repetitive credentials prompt for Enterprise Vault default WebApp URL from edge browser, other browser like chrome or Internet explorer works fine.

Fiddler will show negotiate for authentication in header of the request: 

Negotiate authentication for EV URL fails with the below Kerberos error.

KerberosV5  KerberosV5:KRB_ERROR - KDC_ERR_PREAUTH_REQUIRED (25)

1. NTLM authentication can be used as a workaround for this issue. Below registry settings can be used for a client workstation, or a group policy can be used to enforce the authentication scheme to NTLM for edge browser.

Windows Registry Settings

·         Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge

·         Path (Recommended): N/A

·         Value Name: AuthSchemes

·         Value Type: REG_SZ

·         Example value: ntlm

For further assistance Microsoft document mentioned below, can be referred for edge authentication scheme.

Microsoft Edge – Policies: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#authschemes
 

2. Force Edge to use Enterprise Vault URL in IE mode.

Configure IE mode policies: https://learn.microsoft.com/en-us/deployedge/edge-ie-mode-policies#configure-sites-on-the-enterprise-site-list

NOTE: If Kerberos authentication error needs to be investigated further, it is suggested that a support case with Microsoft be opened.