The certificate chain is incomplete because the issuing subordinate CA certificate is not retrieved by the device as expected when the MDM policy pushes just the Root certificate to the Apple device along with the SCEP profile. Safari could not open the page because the server stopped responding. Note If other authentication methods are enabled in AD FS, the user will also see a link stating 'Sign-in with other options.' If they click this, they return to the STS sign-in page.īoth experiences fail with the following error: If you cancel the operation, please close your browser and try again. Select a certificate that you want to use for authentication. The federated user either sits at an unresponsive STS sign-in page or advances to the default STS sign-in page, where they are prompted as follows: The user is not prompted as expected to approve the use of their user certificate after they click the Sign-in using an X.509 certificate link. The typical experience for iOS users who cannot authenticate against from a Safari browser goes as follows: To eliminate Office applications as a factor, we recommend that federated users in an iOS environment test certificate-based authentication in the Safari browser by following the steps in 'More Information' section. Tapping OK returns to a blank Sign-in screen, where the user can enter their UserPrincipalName and repeat the process.Tapping Backreturns the user to the ADAL Sign-in page, where the process starts all over: the user is prompted to enter their federated email address and then click Next.If the user taps OK, they sit at the same blank Sign-in page with the option at the top to tap Back.The ADAL Sign-in process hangs at a blank page until it times out and returns a 'There is a problem with your account.The ADAL Sign-in page appears, on which the user enters their federated email address and then clicks Next.At the 'Office365' sign-in page, the user clicks Sign-in. The user walks through the Office app setup experience.Here's the typical experience for iOS users who can't authenticate when they sign in to ADAL-enabled Office applications on iOS: The same iOS users encounter no issues when they authenticate by using their user name and password.

However, federated users on Android and Windows devices can successfully authenticate by using CBA. Federated users on Apple iOS devices that have valid user certificates discover that they can't perform Certificate-Based Authentication (CBA) against Azure AD.

Can i delete dod root certificates mac