When Workspace ONE Access is enabled in Workspace ONE UEM, you can generate the Workspace ONE UEM issuer root certificate and export the certificate for use with the Mobile SSO for iOS authentication on managed iOS 9 or later mobile devices.
Procedure
What to do next
In the Workspace ONE Access console, configure Kerberos Authentication in the built-in identity provider and add the certificate authority issuer certificate.