Identity Manager, Secured Services, Server 10.1, and IE error

[Jay_Gregory]

I've seen several threads trying to address an issue regarding using the identity manager to access secured services on Server 10.1 and getting an error "Unable to access the authentication service"
http://forums.arcgis.com/threads/74598-Identity-Manager-for-server-10.1
http://forums.arcgis.com/threads/63690-Secure-Services-over-https

None of these have been able to properly resolve the error.  Here's my problem. 

In Chrome and Firefox, the app works.  The identity manager prompts the user for credentials, and once those credentials are accepted the map service displays the data.  Same app in IE 8: the identity manager prompts the user for credentials, but then returns an error, "unable to access the authentication service"

I have followed the instructions in http://forums.arcgis.com/threads/74598-Identity-Manager-for-server-10.1, adding the relevant lines to proxy.config and the init() function in the app. 

Can someone definitively resolve why this is happening?

I'm using JS API 3.4 or 3.5, all ArcGIS resources, Esri APIs, basemaps, CSS files, web pages are accessed through https (in fact IE doesn't like to send un/pw over http and generates an error).  In server security, the user store is windows domain, role store is built-in, authentication tier is GIS server, and authentication mode is tokens. 

It works in Chrome and Firefox, so nothing seems wrong with the configuration!  What do I need to do to have it work in IE8 too!

Help!

[Jay_Gregory]

Confirmed that this same issue holds to using ArcGIS Online or ArcGIS for Organiziations.  I can view and interact with arcgis online or AGOL map services pointing to server 10.1 secured services when using Firefox or Chrome.  But when using IE, I still get the same error - "unable to access the authentication service" once I submit the credentials. 

Since users have no control over ArcGIS Online code base, this is a confirmed issue with IE, Identity Manager, and Server 10.1 secured services.  Is this a known bug that is being worked on - since IE is the primary approved browser in most large organizations, this functionality should be addressed soon.  Unless I am missing something?

[JohnGravois]

i wasn't able to reproduce the behavior you describe using the map service below (user1:user1) in IE10 (running in IE8 mode)

http://sampleserver6.arcgisonline.com/arcgis/rest/services/Wildfire_secure/MapServer

can you test the same?

[Jay_Gregory]

I was not able to reproduce the behavior with the service you sent.  So this causes me to wonder if its a server configuration issue?  The user store on our ArcGIS Server is Windows Domain (role store is built-in however).  This means that I have secured our service with a custom role I created through ArcGIS for server manager, but the role is comprised of several domain users. Is the authentication store for the server on which the wildfire service is running Windows domain or is the user store built in?  I'm thinking maybe the issue has to do with IE connecting through ArcGIS for Server to Windows Server authentication.

Thanks for your help!  I'd really like to figure this issue out!

Jay