title: JMeter NTLM/Windows Authentication Load Testing
body: <p><strong>What is to be done?</strong></p>
  
  <p>We have an application deployed on the Sharepoint (corporate) Server which uses the windows credentials to log into the application. </p>
  
  <ul>
  <li><p>App URL format: <a href="http://testmachine:1000/sites/test/" rel="noreferrer">http://testmachine:1000/sites/test/</a> </p></li>
  <li><p>Windows Credentials Format: user_id@domain.co.in</p></li>
  </ul>
  
  <p>The objective is to perform the load/performance testing on the application (especially the log in functionality) for such n number of users.</p>
  
  <p>Normally when I hit the app URL in the Firefox/IE, it pops up a window asking for credentials. I enter the credentials, browse the app and then log out. I intend to capture this in JMeter and simulate this for large number of users.</p>
  
  <p><strong>Where I’m stuck?</strong></p>
  
  <p>Now I start the JMeter proxy server, and then try the same steps as above. But when the pop up window appears, JMeter simply doesn’t record the it nor it does record anything else after the login.</p>
  
  <p><strong>What I’ve tried?</strong></p>
  
  <p>If I try the same steps after enabling “Automatically detect intranet network” in IE, then it simply auto detects my windows credentials (No credentials pop-up), logs me into the app (this is not recorded in JMeter either) and takes me to the home page. And any page thereafter I hit gets recorded in JMeter.</p>
  
  <p>I’ve also tried to use the <a href="http://jmeter.apache.org/usermanual/component_reference.html#HTTP_Authorization_Manager" rel="noreferrer">HTTP Authorization Manager</a> using following parameters:</p>
  
  <ul>
  <li>BaseURL : <a href="http://testmachine:1000/sites/test/" rel="noreferrer">http://testmachine:1000/sites/test/</a> </li>
  <li>Username: DOMAIN\USER_ID </li>
  <li>Password:  i_wont_tell_you </li>
  <li>Domain: \ </li>
  <li>Realm:</li>
  </ul>
  
  <p>It didn't help. I am quite confused about how-to-use the above element. And not even sure whether its a right approach to get the solution to my problem. </p>
  
  <p>Any help/suggestions?</p>
  
  <p><strong>P.S.</strong> I know about a tool called Badboy, but have to go for it as a last resource. Also not even sure if it records the pop windows.
  And sorry if the post is verbose.</p>
  
  <hr>
  
  <p><strong>UPDATE:</strong></p>
  
  <p>I have also tried - </p>
  
  <pre><code>Username: USER_ID and Domain: my_company_domain
  </code></pre>
  
  <p>But this is not the actual problem. Problem is, when I try to hit the pages (automation) which I've recorded previously return success response even if I haven't used the HTTP Authorization Manager. I'm not sure what I'm missing.</p>