Configure Workspace ONE Intelligence Connection Settings

To use the Workspace ONE Intelligence features such as data settings in Unified Access Gateway, a connection setting must be created on Unified Access Gateway. A connection setting can be used for sending Unified Access Gateway-specific or edge-services related data to Workspace ONE Intelligence.

Any number of Workspace ONE Intelligence connection settings can be configured.

The Workspace ONE Intelligence credentials file is a JSON file containing Workspace ONE Intelligence URL, access token endpoint URL, client ID, and client secret for authorizing Unified Access Gateway to communicate with Workspace ONE Intelligence. You can download this file from the Unified Access Gateway integrations page on the Workspace ONE Intelligence console.

Prerequisites

You must have already registered the Unified Access Gateway widget on Workspace ONE Intelligence.
You must have already downloaded the credentials file from Workspace ONE Intelligence and saved this file on a computer which you can access.

To integrate Unified Access Gateway in Workspace ONE Intelligence and download the credentials file, see the Integrations in Workspace ONE Intelligence and Register VMware Unified Access Gateway sections in the VMware Workspace ONE Intelligence Products documentation.

Procedure

In the Configure Manually section of the Unified Access Gateway Admin console, click Select.
In Advanced Settings, click the Workspace ONE Intelligence Connection Settings gearbox icon.
To configure the settings for a connection, click Add.

Configure the following Workspace ONE Intelligence settings :

Option	Description
Name	Name of the Workspace ONE Intelligence connection setting. Every connection setting must have a unique name.
Workspace ONE Intelligence URL Thumbprints	Enter the list of Workspace ONE Intelligence URL thumbprints. If you do not provide a list of thumbprints, ensure that the server certificates are issued by a trusted CA. Enter the hexadecimal thumbprint digits. For example, sha1= C3 89 A2 19 DC 7A 48 2B 85 1C 81 EC 5E 8F 6A 3C 33 F2 95 C3. Note: This UI option can be used when the connection to Workspace ONE Intelligence is through a TLS reverse proxy or a security appliance that presents a TLS server certificate, which is not issued by a trusted CA.
Trusted Certificates	Select the trusted certificate files in PEM format, to be added to the trust store. By default, the alias name is the filename of the PEM certificate. To give a different name, edit the alias text box. Note: This UI option can be used when the connection to Workspace ONE Intelligence is through a TLS reverse proxy or a security appliance that presents a TLS server certificate, which is not issued by a trusted CA.

Option

Description

Name

Name of the Workspace ONE Intelligence connection setting.

Every connection setting must have a unique name.

Workspace ONE Intelligence URL Thumbprints

Enter the list of Workspace ONE Intelligence URL thumbprints.

If you do not provide a list of thumbprints, ensure that the server certificates are issued by a trusted CA. Enter the hexadecimal thumbprint digits.

For example, sha1= C3 89 A2 19 DC 7A 48 2B 85 1C 81 EC 5E 8F 6A 3C 33 F2 95 C3.

Note: This UI option can be used when the connection to Workspace ONE Intelligence is through a TLS reverse proxy or a security appliance that presents a TLS server certificate, which is not issued by a trusted CA.

Trusted Certificates

Select the trusted certificate files in PEM format, to be added to the trust store.

By default, the alias name is the filename of the PEM certificate. To give a different name, edit the alias text box.

To upload the Workspace ONE Intelligence Credentials file, navigate to the file location and select the desired file.
(Optional) After you save the file on Unified Access Gateway, to ensure that the client secret in the credentials file is secure, you can either encrypt or delete the file.

Results

The following message is displayed: Configuration is saved successfully.