If you have an existing AirWatch deployment, you can integrate your VMware Identity Manager tenant with it. In this model, user and group sync from your enterprise directory and user authentication are handled by AirWatch. There are no additional deployment requirements for VMware Identity Manager.
Note that integrating VMware Identity Manager with resources such as Horizon 7 or Citrix-published resources is not supported in this model. Only integration with Web applications and native mobile applications is supported.
You must have the following components.
A VMware Identity Manager tenant
An AirWatch tenant
An AirWatch Cloud Connector instance deployed on premises and integrated with your enterprise directory
There are no additional port requirements for VMware Identity Manager. The VMware Identity Manager tenant only communicates with the AirWatch tenant.
For AirWatch deployment requirements, see the AirWatch documentation.
Supported Authentication Methods
This deployment model supports the following authentication methods. These methods are available through the VMware Identity Manager Built-in identity provider.
Password (AirWatch Connector)
Mobile SSO (for iOS)
Mobile SSO (for Android)
Device Compliance (with AirWatch)
Certificate (cloud deployment)
In addition, inbound SAML through a third-party identity provider is also available.
Supported Directory Integrations
You integrate your enterprise directory with AirWatch. See the AirWatch documentation for the types of directories supported.
You can integrate the following types of resources with VMware Identity Manager in this deployment model.
Native mobile applications
You cannot integrate the following resources with VMware Identity Manager in this deployment model.
VMware Horizon® 7, Horizon 6, or View desktop and application pools
VMware Horizon® Cloud Service™ applications and desktops
VMware ThinApp packaged applications
For additional information, see the following documentation.
Guide to Deploying VMware Workspace ONE
The rest of this document does not pertain to the AirWatch deployment model. It only pertains to deployment models that use the VMware Identity Manager connector in outbound-only connection mode.