VisualSVN Server supports Integrated Windows Authentication. With this feature clients are able to authenticate to the server with their current Windows credentials. In other words, a domain user gains access to the server without being prompted to provide his username and password. Comparison of authentication methods available in VisualSVN Server is given in the KB39 article.
In order to enable Integrated Windows Authentication in VisualSVN Server, perform the following steps:
- Start VisualSVN Server Manager.
- Open the Properties dialog for the root node.
- Switch to the Authentication tab.
- Enable Use Windows authentication radio-button and then enable underlying Integrated Windows Authentication check-box.
- Click the OK button.
VisualSVN Server service will be restarted and your domain users will be able to automatically authenticate with their current Windows credentials.
There are the following general recommendations:
- It's recommended to upgrade your Subversion clients to the latest stable release.
- To prevent passwords to be cached on disk it's recomended to disable Basic authentication.
Integrated Windows Authentication in VisualSVN Server is designed to work out-of-the-box. But nevertheless, under some circumstances Single Sign-On may not work. Here is the list of the most frequent cases:
- Subversion clients prohibit to use NTLM/Negotiate authentication if unsecure HTTP protocol is used. In this case it's recommended to use the secure HTTPS protocol. For further details please consider the KB40 article.
- Internet Explorer allows Single Sign-On only to local intranet sites. Consider KB41 to learn more about Internet Explorer behavior and workarounds.
- Single Sign-On is disabled by default in Mozilla Firefox. You are requested to explicitly add your server to the whitelist of trusted sites. Consider the KB42 article.
- Single Sign-On may fail if you run VisualSVN Server service under a dedicated user account. This happens when you don't have Service Principal Name (SPN) configured properly for a dedicated user account. The issue and resolution are described in the article KB52
Note that Integrated Windows Authentication is available in VisualSVN Server Enterprise Edition only. So you will be requested to enter a license key. You can request a free trial license from the evaluation page.