Certificate Authentication using Enterprise SSO

Question

Created Mar ’22

Replies 1

Boosts 0

Views 1.3k

Participants 2

Hi,

In a managed environment, will apps/enterprise SSO extensions have access to digital identities installed at a system-wide level?

I did try with ASWebAuthentication/Safari, both of them can pick the certificate but the SSO extension with URLSession cannot. Is there a challenge that needs to be handled?

I did try with redirect extension.

Also, a native app that is only deployed in the managed environment can have access to the digital identity that is installed at the system level?

What are my options to do a certificate authentication?

Thanks

Boost

Answer 1

Systems Engineer OP

Apple

Mar ’22

Also, a native app that is only deployed in the managed environment can have access to the digital identity that is installed at the system level? In a managed environment, will apps/enterprise SSO extensions have access to digital identities installed at a system-wide level?

Apps or extensions should not have access to a System Keychain, only the Keychain access group that was configured for the app or extension. This is explained Technical Q&A QA1745, Making Certificates and Keys Available To Your App.

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

1