In this blog, we are going to setup Azure AD as a 3rd Party IdP to provide seamless authentication into the Workspace ONE Access Digital Workspace. This blog assumes that you are using native Azure AD authentication or using a federated domain that is NOT Workspace ONE Access. Lets start by logging into our downloading … More Using Azure AD as a SAML IdP in Workspace ONE Access
In a perfect world, we would like you to use the wizards to configure Mobile SSO because it greatly reduces the number of steps required to complete the UEM Integration AND perform the integration. The wizard will also create API Keys that are not subject to standard rate limiting. For whatever reason that you are … More Setting up Mobile SSO Manually
You may have run into a situation where the usernames in UEM might not match the usernames in Workspace ONE Access or they might match multiple users in Workspace ONE Access. When configuring IOS Mobile SSO and using the built-in certificate authority, a SCEP certificate is provisioned to the device which will be used by … More IOS Mobile SSO: Using the UPN attribute with the built-in UEM Certificate Authority.
When you integrate Workspace ONE Access with Horizon you can take advantage of the Unified Digital Workspace as well as the conditional access capabilities including 3rd Party IDP Integration, Risk, and Mult-Factor Authentication. In this blog, I’m going to walk through the SAML flow because it might be a little different than what you’ve typically … More Understanding the SAML between Workspace ONE Access and Horizon
When you authenticate into the Workspace ONE Intelligent Hub application, it requests an OAuth Token from Workspace ONE Access. The Access Token is good for 7 days with a refresh token which is good for 30 days. It is often mistaken that this session is controlled by the Workspace ONE Default Access Policy. The default … More Modifying the WS Intelligent Hub Timeouts
When troubleshooting SAML/OIDC, its extremely useful to have access to your HTTP headers to validate what is being passed from one provider to the next. This is very straight forward on Windows and MacOS devices but not quite as easy when we need the headers on a mobile device. There are many tools on the … More How to Debug IOS Mobile Traffic
There are many use cases when integrating ADFS with Workspace ONE. In this blog, I’m going to focus on the use case of using Workspace ONE as a claims provider. The VMware documentation for integrating ADFS and Workspace ONE is quite good. Please reference the VMware Documentation for the official steps on this integration. My blog is … More Using Workspace ONE Access as a Claims Provider in ADFS
Workspace ONE Access now offers a native integration with DUO. This integration will not require the use of radius and/or the Workspace ONE Access connector. This blog will outline the steps to setup and configure DUO and Workspace ONE Access. *Now Available on All Platforms* 1. Create a Web SDK Application in DUO In your … More Integrating DUO with Workspace ONE Access
I’ve written several blogs on the Okta Integration with Workspace ONE and thought it would be best to consolidate troubleshooting in one place. When you encounter an error, don’t forget to look at Dashboard -> Reports and go to Audit Events in Workspace ONE Access. Please bookmark this blog as I will update this blog … More Workspace ONE and Okta Troubleshooting Blog
So in the latest integration between Workspace ONE Access (aka. VMware Identity Manager) and Okta, we’ve added the device trust capabilities into the Okta Administration Portals. I’ve noticed there has been some confusion on what this integration really does and why it’s been added to the solution. Which method should you use? In order to … More Workspace ONE – Okta Integration Part 4: Device Trust
Steve The Identity Guy 