Details

What is changing? Workspace ONE customers will have single sign-on (SSO) access to all Workspace ONE services through the VMware Cloud Services console. More email communications will be sent on timelines and steps for when this SSO path is made available. The steps for completion are shown below in the “What does a customer do?” section.For first-time login, customers need to register a VMware account within VMware Cloud Services. Thereafter, they use this account to log in to Workspace ONE Cloud Admin Hub, which is a centralized administrative portal to access all Workspace ONE services like UEM, Horizon Cloud, and Access. Customers can access the services directly from Workspace ONE Cloud Admin Hub, without having to sign in again.While the existing accounts will still be available, this new SSO login experience helps administrators to centrally access their Workspace ONE services, without having to maintain multiple accounts or service URLs. This change does not impact customer configurations, policies, or data within any Workspace ONE services.Over the next quarter, Horizon Cloud administrators will be enabled with VMware Cloud services followed by other Workspace ONE services, in a phased manner. You will receive a notification with more information on how to get started, when the opportunity for SSO is available. What does a customer do? Once the customer organization is enabled with VMWare Cloud Services access, service console administrators will receive an email notification to log in, like below. Administrator Steps:1. In the email, select ‘Get Started’ and sign into VMware Cloud Services. Use an existing VMware account or create a new account if new to VMware Cloud. 2. You will see a tile for “Workspace ONE” in VMware Cloud Services which includes Horizon Cloud and other end-user computing services. Select ‘Launch Service’ to be directed to the Workspace ONE Cloud Admin page. (Note: Step 2 may be skipped initially, and you will go immediately to Step 3). 3. The Cloud Admin page lists all the services you are subscribed to. Select Manage on any Workspace ONE service to go to that service without having to sign-in again. 4. Invite other administrators in your organization to create a VMware Cloud account using VMware Cloud Services. Note: Only Administrators with Cloud Org Owner permissions can invite other administrators to their Org in VMware Cloud Services. Use VMware Cloud Services to assign high-level access to Workspace ONE services. Services-specific roles should be assigned within each service.5. For Horizon Cloud: Connect Horizon Cloud in IntelligenceCopy the URL of your Horizon Universal Console because you must enter it for authorization.Authorize your Horizon Cloud Service system to connect to Workspace ONE Intelligence. Start by selecting the Workspace ONE Intelligence Cloud Admin page – Integrations tab.From the Integrations page, select Horizon Cloud and click Setup.Select Setup - Get StartedOn the Authorization Details tab, enter the URL for your Horizon Universal Console in the Authorized URL text field. The system navigates to the URL so you can log in to the Horizon Universal Console. The URL format is https://<HCS FQDN>/horizonadmin.Example: https://cloud.horizon.vmware.com/horizonadmin. 1. In the Horizon Universal Console, enter your My VMware Credentials and Login. 2. Next, the Horizon Universal Console prompts you for your Active Directory Credentials. Enter your credentials. 3. Select Accept to send data to Workspace ONE Intelligence, to complete registration, and to begin the flow of data from Horizon Cloud to Workspace ONE Intelligence. For more information about Workspace ONE Intelligence and Horizon Cloud First-Gen, visit: Horizon Cloud First-Gen Integration If you are on Horizon Cloud Next-Gen, visit : Horizon Cloud Next-Gen IntegrationWhat to expect after onboarding to WS1 Cloud? Now that onboarding is completed, it's easiest to launch services through SSO in WS1 Cloud. Administrators will still be able to access their services using the direct login method, just as they did before onboarding to WS1 Cloud. If a user was previously able to launch Intelligence from the UEM console, they will still be able to do so as long as they already have a role in Intelligence. If a user was not accessing Intelligence through the UEM console prior to onboarding to WS1 Cloud, they will need to request access from their Org Owner. Users should choose the option to Request Access, which will send the Org Owner a request to add a role for the user through VMware Cloud Services. Additional Resources: Workspace ONE Cloud Admin Hub blogWorkspace ONE Cloud Admin Hub docsAdding additional administrators through VMware Cloud ServicesSetting up federation with VMware Cloud ServicesHorizon Documentation