Symantec Mobility: Suite provides an enterprise single sign-on (SSO) feature for iOS 7 and later applications that use the Kerberos authentication protocol. This feature lets your end users authenticate once to the protected URL prefixes that access your corporate resources. When your end users open an app with enterprise SSO configured, iOS requires that they authenticate. However, no additional authentication is required when they launch the subsequent apps that access the same protected URL prefixes.
When you configure enterprise SSO, you specify which URL prefixes are protected, which apps can use SSO, and other parameters. You can then create device policies with those settings. This feature is supported for wrapped and unwrapped apps. Apps can be MDM-managed, but do not have to be.
You can configure enterprise SSO in either of the following ways: