Skip to Content

How to disable Single Sign On (SSO) and enter user manually

It is in most cases good to have SSO to avoid entering user and password manually, however, sometimes, it is required to logon with another user instead of the default, or you want to change the logon language. In order to do this, please follow the steps as below. Have fun.

  1. Set Internet Options Security as below screenshot to Disable ‘Don’t prompt for client certificate selection when only one certificate exists.
  2. Picture1.png
  3. Set Internet Options Security as below screenshot to Select ‘Prompt for user name and password’ in User Authentication.
  4. Picture2.png
  5. To disable the Auto Select Certificate for URLs feature for Google Chrome, complete the following steps:
    1. From your Start menu, choose Run.
    2. Enterregedit and choose Ok.
    3. ExpandHKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Google -> Chrome -> AutoSelectCertificateForUrls.
    4. Delete the entry named 1.
    5. Picture3.png
5 Comments
You must be Logged on to comment or reply to a post.
  • Option1 is not there in Chrome, but it still SSO in Chrome. Your screenshot above also does not show option1, and I dont see it either.

     

    Any other ideas?

      • Hi Sartaj,

        Questions are best asked as Questions.  Questions asked as part of a comment to a blog are often (as you are aware) not noticed by the author or other subject matter experts.  It is sometimes an issue with no comment notification capabilities as configured by the author of the blog.

        If you are still interested in finding a solution, please post your Question in Q&A

        Click on the + Actions button in the upper right hand of the page and select Ask a Question.  

        Regards, Mike

  • I had intermittent luck with the solution where you edit the registry to disable SSO in Chrome. One problem was that several patterns matched the URL that I wanted to exempt from SSO, another problem was that sometimes SSO was active again. I think this is related to a script that “occasionally” (at least once per day, I think) runs through and “fixes” certificate problems.

    Also, when editing the registry, you get a pop-up to choose a certificate, and it seems you cannot disable or interact with this pop-up with Browser automation tools (Selenium/START).

    The workaround that is best for me is:

    • open certmgr.msc 
    • navigate to Personal -> Certificate
    • double click on the certificate in question (your D- or I-number)
    • under the “Details” Tab, click on “Edit Properties”, then “Disable All Purposes for this Certificate”

    To enable the certificate again, repeat the procedure but click on “Enable All Purposes for this Certificate”.