See my attached guide. Hope it helps.
Great doc!
Two suggestions1) Don't allow the private key to be exported2) Include the SPN as a SAN (SPN is more machine centric than UPN)
Awesome! Can you link to a downloadable PDF of this?
See if this works.PDF Download
Pardon my ignorance, but does this require binding to AD? Or, does this work even without binding?
Unfortunately, this requires AD Binding AirWatch allows this which I put in a feature request for this Here please vote this up.
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.