Active Directory Federation Services supports multiple types of authentication, including forms-based authentication and Windows Integrated Authentication.

To support Windows Integrated Authentication prompts, BlackBerry Work must be a supported version of the BlackBerry Work app. Alternatively, you can configure Kerberos Constrained Delegation to suppress the password prompt. In some cases, the authentication server might need to be configured to allow BlackBerry Dynamics clients to use Windows Integration instead of Forms Based Integration. For more information about configuring the authentication server to use Windows Integration, contact your authentication service provider vendor.

For instructions on how to configure your environment, refer to the following:

• Microsoft resource Configuring intranet forms-based authentication for devices that do not support WIA
• Configure single sign-on for BlackBerry Dynamics apps in BlackBerry UEM
• Configure Kerberos Constrained Delegation for BlackBerry Dynamics apps