Configuring Docs@Work to use derived credentials

Applicable derived credential providers and device platforms

Derived credential providers

Any for iOS

Entrust for Android

Device platforms

iOS, Android

Docs@Work for iOS and Docs@Work for Android can use derived credentials to authenticate the device user to internal websites such as SharePoint sites.

Procedure

On the Admin Portal, go to Policies & Configs > Configurations.

Select Add New > Docs@Work.

Alternatively, edit an existing Docs@Work setting if you have one already.

Enter a name for the Docs@Work setting.

In the Custom Configurations section, add the following case-sensitive key-value pairs:

Key

Value

IdCertificate_1

Select a client-provided certificate enrollment setting from the drop-down list. The setting must have the purpose Authentication.

IdCertificate_1_host

The URL for the website to which the certificate from the derived credential will be presented. Wildcards are permitted.

For example:

•

myhost.mycompany.com

•

*.mycompany.com/myfolder

Repeat with similar keys with different numbers for other URLs. For example:

Key	Value
IdCertificate_2	Select a client-provided certificate enrollment setting from the drop-down list. The setting must have the purpose Authentication.
IdCertificate_2_host	AnotherHost.mycompany.com
IdCertificate_3	Select a client-provided certificate enrollment setting from the drop-down list. The setting must have the purpose Authentication.
IdCertificate_3_host	YetAnotherHost.mycompany.com

Click Save.

Select the Docs@Work setting that you just created.

Click More Actions > Apply to Label.

Select the labels to which you want to apply this Docs@Work setting.

Click Apply.