Authentication Type and SSO Setting Behaviors

You can use keychain sharing, the authentication type, and the single sign-on (SSO) option to make access to your application persistent.

Keychain Access Group Required

You must have a shared space, a keychain access group, so that applications signed in the correct format can share keychain entries. See Keychain Access Group Entitlements for information on the signing format. See Troubleshoot Keychain Enablement for common issues with keychain sharing.

Enable Authentication Type and SSO

If you enable both authentication type and SSO, then users enter either their passcode or credentials once. They do not have to reenter them until the SSO session ends.

Enable Authentication Type Without SSO

If you enable an authentication type without SSO, then users must enter a separate passcode or credentials for each individual application.