Yes, but usually only while testing on a new/temporary test VM/host that is not yet recognised by the browser as being in the Intranet Security Zone.

If you need to add a host to the Intranet Security Zone permanently in a way that applies to all clients/browsers - please follow these instructions: Group Policy Local Intranet Zone.

Browser configuration that may be required:

Internet Explorer

Internet Explorer will only allow transparent Single Sign-On to the sites it recognizes as Intranet sites. In production, adding a site to the Intranet sites list is usually done via group policy, but while you test you may need to do it manually.

If you get a credentials popup (a.k.a. Windows Domain popup) while trying to access JIRA click Esc (it should revert to the login page) and verify that the site is recognized as an Intranet site. If the site is not recognized as an Intranet site add it manually. Close all IE windows, reopen them, and try again.
If you still receive the login popup please review the Jespa logs (at the location you've specified in the config) and search for an error message there. Feel free to send this to our support email (at the bottom of this website), we are here to help!

Google Chrome

Google Chrome will work once Internet Explorer is working since Chrome takes its settings from Internet Explorer.

Firefox

NTLM

Firefox requires manual configuration for NTLM:

Type about: config in the address bar.

Confirm that you are aware of the risks of changing the browser configuration

Type "ntlm" (without quotes) in the search bar - several parameters will be displayed. 

Add your host to the list of network.automatic-ntlm-auth.trusted-uris, and use commas to separate hosts if required.

Kerberos

Firefox requires manual configuration for Kerberos:

Type about: config in the address bar.

Confirm that you are aware of the risks of changing the browser configuration

Type "negotiate" (without quotes) in the search bar - several parameters will be displayed. 

Add your host to the list of network.negotiate-auth.trusted-uris, and use commas to separate hosts if required.