Enhancement. Containers scopping the SPNEGO (SSO) authentication configuration per container.

[Perdjesk]

Actual behavior

When SPNEGO SSO configuration is done in Firefox (see https://web.archive.org/web/20210623234924/https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication#original_document_information) the SSO using SPNEGO will be done in every container against the unique identity offered by GSS-API of the host machine. In private browsing it is possible to disable the retrieval of this identity using network.auth.private-browsing-sso;false (i.e false is the default). However whenever an identity is presented by the GSS-API every Firefox container will use it. The only way to dissociate from it is using private browsing.

Expected behavior

It would be beneficial to be able to choose per Firefox container whether to enable SSO or not. This would permit to use Firefox containers without SPNEGO authentication to dissociate from the identity offered by GSS-API of the host machine.

[Perdjesk]

Could be solved by a resolution of https://github.com/mozilla/multi-account-containers/issues/318 allowing to change SSO settings per container.