How to stop the Safeguard Desktop Client from redirecting users when they login? (4323998)

Modifications can be made within the Desktop client configuration file to allow the use of the embedded browser or to select an alternative one.

Users can modify the default login behavior by editing the user.config file. This is an XML file that contains configuration settings.

The file is usually located in the following path, which may differ depending on the installation:

%localappdata%\One_Identity_LLC\Client.Desktop.UI.exe_Url_

There are (2) settings that can be modified to change login behavior.

• UseExternalBrowserForLogin

This setting allows a user to elect to use the embedded web browser login process.
If this value is set to False, then the embedded web browser login process will be used.

<setting name="UseExternalBrowserForLogin" serializeAs="String"><value>False</value></setting>

• ExternalBrowserOverride

This setting allows a user to specify a default browser when logging into the Desktop client, as well as other browser options such as Private or Incognito mode.
The value of this setting will depend upon several factors, but it must contain a placeholder marker of "{0}", which will be replaced with the HTTP URL.

<setting name="ExternalBrowserOverride" serializeAs="String"><value>"iexplore.exe" -private {0}</value></setting>

Additional value options:

microsoft-edge:{0}

Force the use of the Microsoft Edge browser even if it isn’t the system’s default. Unfortunately, there is no option to open Microsoft Edge in Private mode. 

“iexplore.exe” {0}

Force the use of Internet Explorer. This assumes Internet Explorer can be resolved by the system’s PATH environment variable.

Note: The value must start with and include the double quote character. Also note that no version of Internet Explorer supports logging in with FIDO2.

“iexplore.exe” -private {0}

Force the user of Internet Explorer in Private mode. This assumes Internet Explorer can be resolved by the system’s PATH environment variable.

Note: The value must start with and include the double quote character. Also note that no version of Internet Explorer supports logging in with FIDO2.

“C:\Program Files (x86)\Google\Chrome\Application\chrome.exe” --incognito {0}

Force the use of the Google Chrome web browser in Incognito mode.

Note: the setting value must start with and include the double quote character.

“C:\Program Files (x86)\Mozilla Firefox\firefox.exe” -private-window {0}

Force the use of the Firefox web browser in Private mode.

Note: the setting value must start with and include the double quote character.

Any changes made to the user.config file will only take effect after restarting the Safeguard Desktop Client application.

Uninstalling the Safeguard Desktop Client application will delete this file. Changes will need to be reapplied if the product is reinstalled.