title: Windows Authentication doesn't work in Microsoft Edge browser for Angular 2 application
body: <p>In my Angular 2 project the client calls a Web API method, which requires that the user is authorized using the Windows Authentication. This call works fine in Internet Explorer 11, Firefox and Chrome but not in the Microsoft Edge, which doesn't shows the Login dialog, shows "Response with status: 401 Unauthorized for URL" in the console. If I try to open the API Url directly in Edge, it shows the dialog properly, so if I understand it  correct, the problem is in Angular 2 call.</p>
  
  <p>Have someome experienced the same problem with Microsoft Edge browser? Is some special header or Web API configuration required to solve the problem?</p>
  
  <p>Angular 2 service:</p>
  
  <pre><code>let headers = new Headers();
  let options = new RequestOptions({ headers: headers, withCredentials: true });
  
  return this._http.get(this._productUrl, options)
    .map((response: Response) =&gt; &lt;IProduct[]&gt; response.json())
    .do(data =&gt; console.log('All: ' +  JSON.stringify(data)))
    .catch(this.handleError);
  </code></pre>
  
  <p>Web.Config in the WebApi 2 project:</p>
  
  <pre><code>&lt;system.web&gt;
      &lt;authentication mode="Windows" /&gt;
      &lt;authorization&gt;
          &lt;deny users="?" /&gt;
      &lt;/authorization&gt;
   &lt;/system.web&gt;
  </code></pre>
  
  <p>WebApiConfig:</p>
  
  <pre><code>var cors = new EnableCorsAttribute("http://localhost:3000", "*", "*") {SupportsCredentials = true};
  config.EnableCors(cors);
  </code></pre>
  
  <p>Global.asax:</p>
  
  <pre><code>protected void Application_BeginRequest()
  {
      if (Request.Headers.AllKeys.Contains("Origin") &amp;&amp; Request.HttpMethod == "OPTIONS")
      {
          Response.Headers.Add("Access-Control-Allow-Origin", "http://localhost:3000");
          Response.Headers.Add("Access-Control-Allow-Headers", "Origin, Content-Type, X-Auth-Token");
          Response.Headers.Add("Access-Control-Allow-Methods", "GET, POST, PATCH, PUT, DELETE, OPTIONS");
          Response.Headers.Add("Access-Control-Allow-Credentials", "true");
          Response.Headers.Add("Access-Control-Max-Age", "1728000");
          Response.End();
      }
  }
  </code></pre>