[Mozilla Enterprise] disabling auto web single sign-on for GAS

[Hoang (US), Victor T]

Hello all,

My company is rolling out a new web single sign-on tool called GAS (general authentication Service). I could see this causing a problem where computers in our public environments which are shared by multiple people could be signed in as different user. For example, person A signs into their profile and then closes the browser. Person B opens up the browser, but person A's credentials are still on the device because of the auto sign on functionalities of GAS.

I've looked a bit and I know IE11 has an option called Integrated Windows Authentication. Some folks over at GAS also suggested to change a setting to disable Kerberos authentication, but wouldn't that mean that no authentication happens at all? Perhaps theres a policy that I can leverage that clears everything first time loading (eg. Expiring cookies at session end perhaps?)

Any suggestions appreciated!

Victor

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200722/19475928/attachment.html>