In the process of creating a centralized intranet web portal that grants access to various web applications and tools, I encountered an issue. Some of the targeted web applications are hosted on external companies' servers running Windows Authentication with IIS.
The challenge lies in the fact that each external site prompts users for their security credentials without providing any context about which specific site is requesting them. Considering that users may have different credentials for each site, it becomes cumbersome for them to determine which username/password combination to enter at each endpoint.
I am exploring the possibility of customizing the title of these Windows Authentication prompt dialogs to display the domain name of the server requesting credentials. However, I am unsure if this approach poses any security risks.
One potential solution could involve setting requirements for each external site to address this issue or providing them with reusable code.
While I came across a Firefox plugin that addresses this problem, I need a cross-browser solution. Is it feasible to achieve this using client- or server-side JavaScript?