Which is a design decision when architecting a Workspace One on-premise implementation supporting Mobile Single-Sign On for iOS devices?

Which is a design decision when architecting a Workspace One on-premise implementation supporting Mobile Single-Sign On for iOS devices?
A. Decide what level of trust to use between the Active Directory Kerberos realm and Workspace One’s Kerberos realm.
B. Make sure that the Mobile applications that are planned to be managed by Workspace One support the Kerberos protocol for Single-Sign On.
C. Decide what namespace will be used by the Workspace One portal. This will be used for end-user access to the portal. Decide which domain is to be used as the Kerberos realm.
D. Decide the namespace to be used by the Workspace One portal. The domain chosen will also be your Kerberos realm.