Prerequisites: Using 

Kerberos

 authentication for devices

When 

Kerberos

 is used with devices, if a valid TGT is available on the devices, users aren't prompted for login information when they access your organization's internal resources from the browser and apps in the work space.

To configure 

Kerberos

 authentication for specific domains, you can upload your organization’s 

Kerberos

 configuration file (krb5.conf). 

BlackBerry UEM

 supports the Heimdal implementation of 

Kerberos

.

Verify that the configuration file meets the following requirements:

The 
Kerberos
 configuration must use TCP by default instead of UDP. Use the prefix tcp/ for KDC hosts.
If your organization uses VPN, the VPN gateway must allow traffic to the KDCs.

For more information on setting up 

Kerberos

 authentication for 

BlackBerry Dynamics

 apps, see Configuring 

Kerberos

 for 

BlackBerry Dynamics

 apps.