Windows Authentication on ADFS (NTLM or Negotiate) not working on Google Chrome or when using Fiddler

Google Chrome ask for credentials continuously


Turn off Extended Protection. To do that, login to the AD FS server, 

  1. Launch IIS Manager
  2. On the left side tree view, go to access Sites -> Default Web Site -> adfs -> ls
  3. Once you’ve selected the "/adfs/ls" folder, double-click the Authentication icon, 
  4. Right-click Windows Authentication and select Advanced Settings
  5. On the Advanced Settings dialog, choose Off for Extended Protection.

Feedback and Knowledge Base