Setting up up automatic authentication for iOS devices
You can enable iOS devices to authenticate automatically with hosts or domains and web services in your organization’s network. You configure this single sign-on authentication using either of the following profiles:
- Single sign-on extension profile: You can specify settings for a custom extension or use the Kerberos extension provided by Apple. This profile is an updated version of the basic single sign-on profile and offers advanced configuration options.
- Single sign-on profile: The legacy profile that offers basic configuration for single sign-on authentication using Kerberos.
After you assign the profile, the user is prompted for a username and password the first time they try to access a secure host or domain that you specified. The login information is saved on the user’s device and used automatically when the user tries to access any of the secure hosts or domains specified in the profile. When the user changes the password, the user is prompted the next time they try to access a secure host or domain.