Enthusiast
Enthusiast

MobileSSO - iOS - On-premise ADCS

I am in the process of troubleshooting a MobileSSO workflow for iOS, using an on-premise ADCS:

Windows Server 2016 - ADCS

Kerberos Client Certificate Template configured

Workspace ONE UEM Certificate Services configured

Workspace ONE UEM Certificate (User + KDC) deployment + Single-sign On payloads configured

Workspace ONE Access Connector v19.03 installed and Active Directory Account used to complete setup

Workspace ONE Access MobileSSO Authentication Mechanism enabled - REALM matches REALM in Workspace ONE UEM Single ON configuration

Workspace ONE Access policies configured - default access policy for iOS to leverage Mobile SSO and a fallback of Password (cloud deployment)

When enrolling an iOS device through the ABM (DEP) workflow, I get the Intelligent Hub application, when opening the intelligent Hub, I firstly get a message to enter a password, which looks like it is coming from my Access tenant but the password is for my username@vidmpreview.com, at this point no password is accepted and then it fails to the following error message: Access Denied - Kerberos NEGOTIATE failed or was canceled by the user

Any ideas or pointers on how to get this workflow working would be handy.

0 Kudos
0 Replies