Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.17
  3. Administration
  4. Using the management console
  5. Setting console login options
  6. Configuring single sign-on for BlackBerry UEM
  7. Configure single sign-on for BlackBerry UEM

Configure single sign-on for 
BlackBerry UEM

When you configure single sign-on for administrators and users logging in to 
BlackBerry UEM
, you configure it for the management console and 
BlackBerry UEM Self-Service
.
  • Configure constrained delegation for the 
    Microsoft Active Directory
     account that 
    BlackBerry UEM
     uses for the directory connection.
  • If you enable single sign-on for multiple 
    Microsoft Active Directory
     connections, verify that there are no trust relationships between the 
    Microsoft Active Directory
     forests.
  1. On the menu bar, click 
    Settings > External integration > Company directory
    .
  2. In the 
    Configured directory connections
     section, click the name of a 
    Microsoft Active Directory
     connection.
  3. On the 
    Authentication
     tab, select the 
    Enable Windows single sign-on
     check box.
  4. Click 
    Save
    .
  5. Click 
    Save
    .
    BlackBerry UEM
     validates the information for 
    Microsoft Active Directory
     authentication. If the information is invalid, 
    BlackBerry UEM
     prompts you to specify the correct information.
  6. Click 
    Close
    .
  • Restart the 
    BlackBerry UEM
     services on each computer that hosts a 
    BlackBerry UEM
     instance.
  • Instruct administrators and 
    BlackBerry UEM Self-Service
     users to configure their browsers to support single sign-on for 
    BlackBerry UEM
    .