Prompting for credentials multiple times in Safari on iOS devices

Known issues exist with the Safari browser on Apple devices when it is authenticating to IIS using Windows Authentication, possibly prompting you for credentials many times. If you experience such issues, follow these steps.

1. You should always clear your cache and history before trying these solutions.

   1. Close any open Safari tabs.

   2. Go to Settings > Safari.

   3. Clear History, Cookies, Data, and Cache. These items differ depending upon the version.

2. Perform the following actions.

   Option	Description
   If you are being prompted for credentials twice	Enter your credentials in domain\username format if applicable. If the page does not load after the credentials are entered in correctly, but the dialog to enter credentials is no longer being displayed, immediately stop and refresh the page.
   Turn on private browsing	Close any open Safari tabs. Go to Settings > Safari. Turn on Private Browsing. Clear Cache and History.
   If the Web page is prompting more than twice, or is still not working	Remove Negotiate from IIS providers under Windows Authentication. Open Internet Information Services (IIS) Manager and navigate to the Piml.Web site in the Connections pane. In the IIS section, double-click Authentication. In the Authentication window, right-click Windows Authentication and select Providers… In the Providers window, select Negotiate from the Enabled Providers list. Click Remove and then click OK. In the Connections pane, right-click the computer name and select Refresh, or select Stop and then Start to restart IIS. Exit Internet Information Services (IIS) Manager.
   If you are NOT being prompted for credentials after closing/ refreshing Safari or after becoming unauthenticated (receiving 401 errors).	Ensure that the Apple device is using a trusted certificate: On the device go to Settings > General > Profile. Ensure that a configuration profile exists for your domain name. If the configuration does exist, Go to Settings > General > Certificate Trust Settings. Note: If a profile does not exist for your root domain certificate, the root certificate will have to be transferred to the device via USB or email. Then you will have to double-click the certificate to install the profile. Ensure that your domain name is checked under the Enable Full Trust for Root Certificates section.
   	If the device is still not re-prompting for credentials, try the following: In the URL bar in Safari, delete all information in the URL after the website name. For example, in the URL in the URL bar in Safari, delete all information in the URL after the website name. For example, in the URL https://www.domain.com/piml.web/#/tours?name=Tour1, delete /#/tours?name=Tour1 from the URL, leaving https://www.domain.com/piml.web. Click Enter/Go on the keyboard to navigate to the changed URL. The device should re-prompt for credentials

If the above steps fail, you will have to clear cache on the device to be re-prompted by Safari. In this scenario, trying another browser such as Google Chrome is recommended.