SSO Validation
You will now validate that the Workspace ONE UEM iOS Profile was successfully configured with the appropriate certificates and Single Sign-On settings to allow Safari on your iOS device to authenticate without requiring users to input their credentials.
Once the iOS Profile is validated, you will sign in to the Workspace ONE catalog to confirm that the Single Sign-On works and experience the end user interaction.
1. Verify the Single Sign-On Profile Settings
Tap Settings on the iOS device.
1.1. Navigate to General Settings, Digital Workspace
- Tap General
- Scroll down to find the Device Management option
- Tap Device Management
1.2. Open the Digital Workspace profile
Tap the Workspace Services profile.
1.3. View More Details
Tap More Details to view the profiles and settings contained within the Workspace Services profile.
1.4. Open the Singe Sign On Account
You will see the Single Sign On Account that you added as part of the iOS Profile you created in the Workspace ONE UEM console.
Tap TestSSO.
NOTE: If you set a different Account Name for your Single Sign-On payload for your iOS Profile, the Single Sign On Account will be listed as a different name.
1.5. Verify Settings
Verify that the following Single Sign-On settings are correct:
- Principal Name is set to aduser.
- Realm is set to VIDMPREVIEW.COM.
- URL Prefix Matches is set to https://{tenantName}.vidmpreview.com/. This URL will be your Workspace ONE Access Tenant URL.
- Eligible App IDs includes com.apple.mobilesafari.
NOTE: If any of these settings are incorrect, return to the Workspace ONE UEM Console and inspect your iOS Identity KDC Cert Profile that was previously created.
2. Clear the Safari Cache
Navigate back to the main Settings page.
- Scroll down to find the Safari settings
- Tap Safari
- Scroll down to find Clear History and Website Data
- Tap Clear History and Website Data
2.1. Confirm the Clear History and Data Prompt
Click Clear.
3. Launch Safari on the iOS Device
Tap the Safari icon.
4. Navigate to Workspace ONE Access in Safari
- Enter the URL of your Workspace ONE Access tenant in the URL bar. This will be in the format
https://{tenantName}.vidmpreview.com. - Click Go
5. Workspace ONE App Catalog Single Sign-On
Notice that Workspace ONE Access is signing you in without requiring any authentication.
6. Workspace ONE App Catalog
You are now signed into the Workspace ONE catalog! The Single Sign On settings and certificates you configured and distributed to your device with Workspace ONE UEM allowed your user account to authenticate without having to enter any credentials.
There are no applications visible because they haven't been added in Workspace ONE Access or Workspace ONE UEM. If you add applications, they will be visible here.
0 Comments
Add your comment