Configure Single Sign-On Extensions (iOS/iPadOS)



Single Sign-On profile allows admins to configure an app extension that performs single sign-on on enrolled devices. The specified applications are allowed to access without requiring authentication in each app.

Note: This profile is supported on iOS 13 or higher devices.

To configure an app extension that performs Single Sign-On on enrolled devices, follow these steps:

1.  On the SureMDM Web Console, navigate to Profile > iOS/iPadOS > Add > Single Sign-On Extensions > Configure.

2.  Enter a Profile Name.

3.  Configure single sign-on settings and click Save.

Settings

Description

Extension Identifier

Enter the bundle Id of the app extension that performs single sign-on for the specified URLs.

Single Sign-On Type

Select the single sign-on type:

  • Credential 

        Two options will be displayed:

        Realm - Enter the Realm name for the credential payload.

        Host - Enter the array of host names or domain names that are authenticated using app extensions.

  • Redirect 

        The following option will be displayed:

        URLs - Enter the array of URL prefixes of identity providers


The newly created profile will be listed in the Profiles section.

4.  Go back to Home tab and select the iOS device(s) or group(s).

5.  Click Apply to launch the Apply Job/Profile To Device prompt.

6.  In the Apply Job/Profile To Device prompt, select the created profile and click Apply.