Configure the AirWatch console to fetch and use CA certificates before you configure the Unified Access Gateway bridging feature to provide single sign-on (SSO) to On-Premises legacy non-SAML applications using certificate validation.