Allow devices to have single sign-on access to your organization's network

You can allow devices to have single sign-on access to your organization’s network from the browser in the work space using the following authentication protocols:
  • Kerberos
  • NTLM
BlackBerry Enterprise Service 10 uses the same Kerberos configuration file that your organization uses to authenticate users with their desktop computers.

For devices running a version of BlackBerry 10 OS that is 10.2.1 or later, you can specify trusted domains that support NTLM for internal web sites that use password-based authentication. When a user enters their password in the work space browser for any site in the trusted domain, the device uses the same password for all specified sites in the domain.

For more information, see the BlackBerry Device Service Solution Security Technical Overview.