Back to top

Using SSO with a Common Access Card (CAC) in the Work Profile

Last updated July 26th, 2023


This article refers specifically to the Work Profile container activated with a Knox Platform for Enterprise license key.


  • Knox Platform for Enterprise (KPE)
  • All devices supporting the Knox framework with a Work Profile installed

Can a Common Access Card (CAC) use SSO inside the Work Profile?

Yes. You can support Single Sign-On (SSO) for apps within the Work Profile. Our multi-tenanted cloud service connects to each enterprise’s Active Directory infrastructure. CAC or Smart Card readers can use this SSO service to authenticate enterprise users and provide access to enterprise services like Exchange ActiveSync (EAS).

The CAC reader must have an app that supports the Knox SSO to request SSO authentication. Currently, the only reader that uses our SSO authentication service is baiMobile’s BAL-3000MP Bluetooth Smart Card reader.

Is this page helpful?