---
id: requests-negotiate-sspi
version: "0.5.2"
license: unclear
license_treatment: permissive
maintenance: abandoned
---

# requests-negotiate-sspi — This package allows for Single-Sign On HTTP Negotiate authentication using the requests library on Windows.

License: permissive · Maintenance: abandoned · Downloads: 111.4K/mo

## What it is and what it does

requests-negotiate-sspi extends the requests library to support HTTP Negotiate authentication on Windows, enabling single-sign-on via Kerberos or NTLM using the Windows SSPI interface. It integrates with Active Directory and supports Extended Protection for Authentication (Channel Binding Hash), making it suitable for enterprise environments that require this security feature.

The package is a thin wrapper around Windows authentication mechanisms, designed for developers building HTTP clients that need to authenticate against Windows-protected resources without prompting for credentials. It works by plugging into requests' auth handler system, allowing transparent SSO when the user is already authenticated to the Windows domain.

Use it for:

- Authenticate HTTP requests to Active Directory Federation Services (ADFS) endpoints using domain credentials.
- Build Windows service applications that make HTTP calls to internal APIs without storing passwords.
- Access Kerberos-protected resources on corporate networks using implicit Windows authentication.
- Implement Channel Binding Hash authentication for services that require Extended Protection for Authentication.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Adds HTTP Negotiate authentication (Kerberos/NTLM single-sign-on) to the requests library using Windows SSPI, with support for Extended Protection for Authentication.

No. The package is abandoned (last release 2018-10-10, last commit 2023-03-31) and targets Python versions up to 3.5. While it has low install friction and permissive licensing, the lack of maintenance means no fixes for modern Python or requests versions, and no support for security issues. Use only if you are locked into legacy Python 2.7 or early Python 3 on Windows; otherwise, evaluate modern alternatives or native requests authentication methods.

## Install

pip install requests-negotiate-sspi
uv add requests-negotiate-sspi
poetry add requests-negotiate-sspi

## Installing requests-negotiate-sspi

Before you install: Low install friction, but maintenance is abandoned: last release was 2018-10-10 and last commit 2023-03-31. The package depends on pypiwin32 and requests, both common dependencies. No recent updates or bug fixes should be expected.

License in practice: Licensed under Apache Software License (permissive), which allows commercial and private use with minimal restrictions.

Quickstart:

pip install requests-negotiate-sspi

import requests
from requests_negotiate_sspi import HttpNegotiateAuth

response = requests.get('http://example.com', auth=HttpNegotiateAuth())

Windows-only: requires pypiwin32 and Windows SSPI support; not usable on Linux or macOS.

Verify before relying:

- Whether the package works reliably with modern Python versions (classifiers list only up to 3.5).
- Current compatibility with recent requests library versions.
- Whether Extended Protection for Authentication (Channel Binding) works with current Active Directory Federation Services deployments.

## Package facts

- License: not declared (permissive)
- Python support: unspecified
- Install friction: low
- Maintenance: abandoned
- Downloads: 111.4K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

windows negotiate authentication requests, kerberos ntlm single sign on, http negotiate sspi, windows sso http requests, active directory federation services, channel binding authentication, requests library windows auth, windows-only, abandoned, authentication

[View on SkillFed](https://skillfed.io/packages/requests-negotiate-sspi) · [View on PyPI](https://pypi.org/project/requests-negotiate-sspi/)