Which three UEM profile payloads are required for the VMware Workspace ONE Mobile SSO on iOS to work? (Choose three.)

Question

Options

• ANetwork Usage Rules
• BSingle Sign-On
• CSCEP
• DSSO Extension
• EContent Filter
• FCredentials

• A
  3% (1)
• B
  90% (35)
• E
  3% (1)
• F
  5% (2)

Explanation

For Workspace ONE Mobile SSO on iOS to function, three coordinated payloads must work together: Single Sign-On (B) defines the Kerberos realm and which apps/URLs participate in the SSO flow; SCEP (C) provisions the client certificate that serves as the cryptographic credential for authenticating the user without a password prompt; and SSO Extension (D) (iOS 13+) designates the Workspace ONE Intelligent Hub as the system-level authentication broker that intercepts app auth requests and fulfills them automatically.

The distractors are wrong because Network Usage Rules (A) governs cellular data permissions per app, Content Filter (E) is a web filtering payload, and Credentials (F) delivers static certificates rather than enrolling them dynamically - SCEP is the correct mechanism for certificate-based SSO enrollment.

Memory tip: Think of the three required payloads as "Sign, Stamp, Broker" - Sign (Single Sign-On defines the SSO rules), Stamp (SCEP stamps the device with a certificate), Broker (SSO Extension brokers the auth handoff). If any one is missing, the chain breaks.

No community discussion yet for this question.