CertAP PKI policy - SSO