You can configure Kerberos Constrained Delegation (KCD) or Kerberos PKINIT for the BlackBerry Work app.

• When you configure KCD, you allow users to provision the BlackBerry Work app without requiring users to enter their network credentials.
• When you configure Kerberos PKINIT, you allow a trust directly between the BlackBerry Work app and Windows KCD. Users authenticate using certificates issued by Microsoft Active Directory Certificate Services.