Integrated Authentication and the Challenge Handler

Use integrated authentication to pass single sign on (SSO) credentials or certificates to use to authenticate to web sites like content repositories and wikis. Set the function in the Workspace ONE UEM console and add a list of allowed sites. Then use the challenge handler in your application to handle incoming authentication challenges.

Challenge Handler Methods for Challenges

Find the challenge handler in the AWController class of the SDK. Inside the AWController, use the listed methods to handle an incoming authentication challenge for connections made with NSURLConnection and NSURLSession.

Table 1. Descriptions of Challenge Methods

Method	Description
func canHandle(_ protectionSpace: URLProtectionSpace, withError error: Error?) -> Bool	Checks that the Workspace ONE SDKcan handle this type of authentication challenge. The SDK makes several checks to determine that it can handle challenges. Is the Web site challenging for authentication on the list of allowed sites in the SDK profile? Is the challenge one of the supported types? Basic NTLM Client certificate Does the SDK have a set of credentials to respond? Certificate User name and password If all three of the criteria are met, then this method returns YES. The SDK does not handle server trust, so your application must handle NSURLAuthenticationMethodServerTrust.
func handleChallenge(forURLSessionChallenge challenge: URLAuthenticationChallenge, completionHandler: @escaping (_ disposition: URLSession.AuthChallengeDisposition, _ credential: URLCredential) -> Void) -> Bool	Responds to the actual authentication challenge from a network call made using NSURLSession. This method is the same as the handleChallenge method, except the system uses this method with calls made with NSURLSession. This call involves using a completion block to handle authentication challenges.