How to enable Single Sign-On options in Internet Explorer (4298845)

How to enable Single Sign-On options in Internet Explorer

Using Single Sign-on is required to gain access to a website that needs user credentials but default configuration for Internet Explorer needs users to enter account and password.

If using Windows Authentication is required then some configuration in Internet Options must be added.

The registry keys needed to use Single Sign-On with Internet Explorer are these:

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]
"1A00"=dword:00000000
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]
@=""
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\domain1.com\subdomain]
"https"=dword:00000002
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\subdomain.domain2.com]
"https"=dword:00000002

To add those values a Registry element can be used, to do that

1. Open Desktop Authority console and use any existing profile (or a new one can be created).
2. Add a new Registry element and name it properly "Enable SSO in Internet Explorer" in this case:
   
   
3. A new value must be created with this configuration:
   Action  Write Value
   Hive HKEY_CURRENT_USER
   Key SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
   Type REG_DWORD
   Value 1A00
   Data / expression 0
   
4. Click "Confirm".
   
5. A new value must be created for every desired website with this configuration:
   Action  Write Value
   Hive HKEY_CURRENT_USER
   Key SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\domain.name\website
   Type REG_DWORD
   Value https
   Data / expression 00000002
   (if protocol to use is http then it must replace https)
   
6. Click "Confirm".
7. If another website must be added, this configuration can also be used:
   Action  Write Value
   Hive HKEY_CURRENT_USER
   Key SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\website.domain.name
   Type REG_DWORD
   Value https
   Data / expression 00000002
   (if protocol to use is http then it must replace https)
8. Click "Confirm".
9. Click "Save" and replicate the changes.

With this configuration Single Sign-On will work in web sites with credential dialogs.