Select the product you need help with

You are repeatedly prompted to enter your credentials to use a proxy server in Internet Explorer Service Pack 1

Article ID: 822458 - View products that this article applies to.

SYMPTOMS

After you type your credentials to use a proxy server to view a Web site, you may be prompted to type your credentials again.

Back to the top | Give Feedback

This problem may occur if you use Windows NT LAN Manager (NTLM) authentication with more than one proxy server. Microsoft Internet Explorer does not support NTLM authentication with more than one proxy server where NTLM authentication is required on each proxy server. The NTLM authentication on the first proxy server in the chain succeeds, but when the proxy server sends a "407 Proxy authentication required" response, the user is prompted for credentials. This problem occurs with any proxy server product regardless of the manufacturer.

Back to the top | Give Feedback

WORKAROUND

To work around this problem, configure NTLM authentication on the downstream proxy server in the chain, and configure the downstream proxy server in the chain to pass credentials to the upstream proxy servers.

Microsoft ISA Server

If you use Microsoft Internet Security and Acceleration (ISA) Server, follow these steps to configure the downstream ISA Server-based server to pass credentials upstream:

Click Start, point to All Programs, point to Microsoft ISA Server, and then click ISA Management.
Expand Servers and Arrays, expand Your_Server_Name, expand Network Configuration, and then expand Routing.
Right-click the routing rule that you want to configure, and then click Properties.
Click the Action tab, click Routing them to a specified upstream server, and then click Settings.
In the Server or array box, type the name or the IP address of the upstream server.
In the Port box, type the port number that the upstream server uses to listen for Hypertext Transfer Protocol (HTTP) requests. Typically, this is port 8080.
In the SSL Port box, type the port number that the upstream server uses to listen for Secure Sockets Layer (SSL) requests. Typically, this is port 8443.
Click OK two times.

For more information about how to configure routing on ISA Server, visit the following Microsoft TechNet Web site:

http://www.microsoft.com/resources/documentation/isa/2000/enterprise/proddocs/en-us/isadocs/cmt_h_routeroute.mspx

(http://www.microsoft.com/resources/documentation/isa/2000/enterprise/proddocs/en-us/isadocs/cmt_h_routeroute.mspx)

Third-party proxy server

If you use a third-party proxy server in the chain of proxy servers, you must follow the steps that your proxy server manufacturer gives you to configure the downstream proxy server in the chain to pass credentials to the upstream proxy servers.

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

For information about your hardware manufacturer, visit the following Web site:

http://support.microsoft.com/gp/vendors/en-us

(http://support.microsoft.com/gp/vendors/en-us)

Back to the top | Give Feedback