{% extends "base.html" %}
{% block title %}Sign in — Certificate Portal{% endblock %}
{% block content %}
<section class="card">
  <h1>Sign in to get a user certificate</h1>
  <p>
    After you authenticate, this portal looks up your Active Directory SID, asks
    the CA to issue a certificate, and gives you a signed Apple configuration
    profile to install.
  </p>
  {% if error is defined and error %}
    <p class="banner error" role="alert">{{ error }}</p>
  {% endif %}
  <p>
    <a class="button" href="/login">Sign in with SSO</a>
  </p>
  <p class="muted">
    The private key is created here, not on your phone. That is expected for
    user Wi-Fi certificates. See Help after you sign in.
  </p>
</section>
{% endblock %}