I have created a web app for hosting my sites and configured it according to Microsoft best practice on technet. However, when I log on to the portal I enter my credentials and when I click on my name on the upper right hand corner and go My Profile I get prompted for password again before I get redirected to my profile. I don't think it should be like this but not sure where to start looking really, any ideas?

Thanks in advance.


You will need to authenticate to each web application you visit. If your main site is http://intranet and your MySite host and personal sites are at http://mysites then going to the user profile (within the MySite Host) or to a personal site would require authentication again.

If you are using Windows Auth, then it would be a good idea to configure the user's browsers to pass the user's logged in credentials to avoid log in prompts in most scenarios.

  • 1
    We're using Windows Auth so is there a way in IIS/AD or something to configure this? We have a couple of thousand users using all sorts of clients (PC/Mac/iPad/iPhone) and browsers. We had the three login prompt issue but sorted it with support.microsoft.com/kb/896861/en-us. Microsoft recommends to create a new web app for hosting my sites which I did but was it really a good idea if the users have to authenticate a second time? – John Jan 5 '12 at 1:04
  • A separate web app is almost always the preferred method. How are your sites addressed? Host Headers, server names, IPs? Integrated login will only work for IE users, other browsers, non-domain computers, or mobile devices will require authentication. – Mike Oryszak Jan 5 '12 at 2:42
  • portal with alternate access mapping portal.company.com for external access, my sites internal url at portal:SomePort with alternate access mapping for external use my.company.com, would claims authentication solve this issue with shared authentication? If this double login prompt is a big issue for the client would you recommend to keep My Sites in the same web app as the portal? – John Jan 5 '12 at 4:34
  • You should avoid using ports for production systems. Using host headers like internal.company.com and external.company.com is better, and also part of what is pointed out in your kb article. My recommendation would be to set it up using host headers for both web applications. If that isn't possible, then you could move it all to the main web app, but that leads to a number of other issues and limitations. – Mike Oryszak Jan 5 '12 at 4:42

Have a look at this article, which helps you in fixing the issue.. SharePoint site continually prompting for passwords Hope this helps you!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.