AllHttpAuthSchemesAllowedForOrigins

List of origins that allow all HTTP authentication

Supported versions

  • Windows: ≥ 102
  • macOS: ≥ 102
  • Android: ≥ 138
  • iOS: Not supported

Description

Set this policy to specify which origins allow all the HTTP authentication schemes Microsoft Edge supports regardless of the AuthSchemes policy.

Starting in Microsoft Edge version 161, this policy applies only to destination server origins and doesn't apply to proxy server authentication challenges. To allow all HTTP authentication schemes for proxy servers, use the "AllHttpAuthSchemesAllowedForProxies" policy instead. Before version 161, proxy servers matching this policy can also use all HTTP authentication schemes unless "AllHttpAuthSchemesAllowedForProxies" is configured.

Format the origin pattern according to this format (https://go.microsoft.com/fwlink/?linkid=2095322). Up to 1,000 exceptions can be defined in AllHttpAuthSchemesAllowedForOrigins. Wildcards are allowed for the host component (e.g., '*:8000' matches all hosts on port 8000). To match all schemes or all ports, omit the component entirely (e.g., 'example.com' matches any scheme and any port). A hostname (e.g., 'example.com') also matches its subdomains. To match a host exactly and exclude its subdomains, prepend it with a dot (e.g., '.example.com'). To match all origins, use a single asterisk ('*').

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: No
  • Applies to a profile that is signed in with a Microsoft account: Yes

Data type

  • List of strings

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: AllHttpAuthSchemesAllowedForOrigins
  • GP name: List of origins that allow all HTTP authentication
  • GP path (Mandatory): Administrative Templates/Microsoft Edge/HTTP authentication
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

*.example.com

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\AllHttpAuthSchemesAllowedForOrigins
  • Path (Recommended): N/A
  • Value name: 1, 2, 3, ...
  • Value type: List of REG_SZ

Example registry value

SOFTWARE\Policies\Microsoft\Edge\AllHttpAuthSchemesAllowedForOrigins\1 =

*.example.com

Mac information and settings

  • Preference Key name: AllHttpAuthSchemesAllowedForOrigins
  • Example value:
<array>
  <string>*.example.com</string>
</array>

Android information and settings

  • Preference Key name: AllHttpAuthSchemesAllowedForOrigins
  • Example value:
["*.example.com"]

See also