Saturday, 10 May 2025

Learn how to configure single sign-on between Microsoft Entra ID and Freshdesk.

Learn how to configure single sign-on between Microsoft Entra ID and Palo Alto Networks Captive Portal.

Learn how to configure single sign-on between Microsoft Entra ID and Adaptive Insights.

9. Click the folder icon to upload your **Configuration profile file**. Choose the *kerberos.mobileconfig* file you [saved previously](#Kerberos SSO MDM profile configuration for on-premises Active Directory) after customizing the template.

> [!NOTE]

When this setting is enabled, the secure patterns are strictly enforced.

A Microsoft Entra documentation page was updated: Adobe Creative Cloud Tutorial.

A Microsoft Entra documentation page was updated: Kao Navi Tutorial.

A Microsoft Entra documentation page was updated: Tutorial V2 Android.

|IssuerAndSubject | `X509:<I>DC=com,DC=contoso,CN=CONTOSO-DC-CA<S>DC=com,DC=contoso,OU=UserAccounts,CN=mfatest` | certificateUserIds | low-affinity |

1. Authenticate with a certificate that has policy OID of 3.4.5.6 and Issued by CN=CBATestRootProd. Authentication should pass and get a multifactor claim.

1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](~/identity/role-based-access-control/permissions-reference.md#cloud-application-administrator).

author: henrymbuguakiarie

1. Select **My Access settings for end users**.

- For the initial agent enablement/setup, you will need to be either a [Security Administrator](../role-based-access-control/permissions-reference.md#security-administrator) or [Global Administrator](../role-based-access-control/permissions-reference.md#global-administrator) role during the preview. These roles also have [access to Security Copilot by default](/copilot/security/authentication). After setup, you can assign Conditional Access Administrators with Security Copilot access. This will give your Conditional Access Administrators the ability to use the agent as well.