Loading
Mobile Application Security
Certificate-Based Authentication

Certificate-Based Authentication

Using certificates to authenticate simplifies provisioning your mobile users, and your day-to-day mobile administration tasks by eliminating usernames and passwords.

Salesforce uses X.509 certificates to authenticate users more efficiently, or as a second factor in the login process.

MDM Settings for Certificate-Based Authentication

To enable certificate-based authentication for your mobile users, you configure key-value pair assignments through your MDM suite.

Here are the supported keys:

Key Data Type Platform Description
RequireCertAuth Boolean Android, iOS

If true, the certificate-based authentication flow initiates.

Android: Uses the user certificate on the device for authentication inside a webview.

iOS: Redirects the user to Safari for all authentication requests.

ManagedApp​CertAlias String Android Alias of the certificate deployed on the device picked by the app for user authentication. Required for Android only.

After you save your key-value pair assignments, you can push the mobile app with the updated certificate-based authentication flow to your users via your MDM suite.

 
Loading
Salesforce Help | Article