Configure single sign-on for BlackBerry UEM
BlackBerry UEM
When you configure single sign-on for administrators and users logging in to
BlackBerry UEM
, you configure it for the management console and BlackBerry UEM Self-Service
.- Configure constrained delegation for theMicrosoft Active Directoryaccount thatBlackBerry UEMuses for the directory connection.
- If you enable single sign-on for multipleMicrosoft Active Directoryconnections, verify that there are no trust relationships between theMicrosoft Active Directoryforests.
- On the menu bar, clickSettings > External integration > Company directory.
- In theConfigured directory connectionssection, click the name of aMicrosoft Active Directoryconnection.
- On theAuthenticationtab, select theEnable Windows single sign-oncheck box.
- ClickSave.
- ClickSave.BlackBerry UEMvalidates the information forMicrosoft Active Directoryauthentication. If the information is invalid,BlackBerry UEMprompts you to specify the correct information.
- ClickClose.
- Restart theBlackBerry UEMservices on each computer that hosts aBlackBerry UEMinstance.
- Instruct administrators andBlackBerry UEM Self-Serviceusers to configure their browsers to support single sign-on forBlackBerry UEM.