Skip to main content
keni
Level 2.0: Eclair
May 29, 2025
Question

Device Attestation: Auto-Select Client Cert + User Login on Android

  • May 29, 2025
  • 3 replies
  • 48 views

Hi everyone,

 

I’m trying to use client certificate authentication (mTLS) with Chrome Custom Tabs on Android. We want to automatically select the client certificate without prompting the user, and also ask for their username and password as part of the login process. This way, we can combine both certificate-based authentication and user credentials for device attestation.

 

On desktop Chrome, this can be done using a policy like AutoselectCertificateForUrls, but it seems this doesn’t work on Android. If this is a known limitation, is there a way to request this feature from the Android or Chrome team?

3 replies

DarenSamson
Level 1.5: Cupcake
May 29, 2025

Great question!

Yann_ROLAND
Level 2.2: Froyo
September 1, 2026

Yesss! someone trying to do the same as us ! good news for you, Chrome 143 now bring this possibility however, with a restriction on how the certificate needs to be published. In my use case I’m using certificates pushed by the Knox UCM Plugin so maybe I’ll find a workaround that will work on Samsung only. Let’s keep in touch.

Yann_ROLAND
Level 2.2: Froyo
September 1, 2026