The True Single Sign-on (True SSO) feature grants users access to a Linux virtual desktop or a published desktop or application after they first log in to VMware Workspace ONE. Users can log in to VMware Workspace ONE using a smart card or RSA SecurID or RADIUS authentication, and then access remote Linux resources without entering their Active Directory credentials.
Overview of True SSO
If a user authenticates by using Active Directory (AD) credentials, the True SSO feature is not necessary. However, you can configure True SSO to be used even in this case, so that the desktop can support both AD credentials and True SSO.
When connecting to a Linux virtual desktop or a published desktop or application, users can select to use either the native Horizon Client or HTML Access.
System Requirements for True SSO
True SSO is supported on desktops running the following Linux distributions with the specified versions of Horizon Agent installed.
| Linux Distribution | Horizon Agent |
|---|---|
| RHEL/CentOS 8.1 | Horizon Agent 7.12 or later |
| RHEL/CentOS 8.0 | Horizon Agent 7.11 or later |
| RHEL/CentOS 7.x | Horizon Agent 7.6 or later
Note: True SSO is supported on RHEL/CentOS 7.x desktops only with the following join methods: the default join domain tools, Samba, System Security Services Daemon (SSSD), and the Kerberos network authentication protocol.
|
| Ubuntu 20.04/18.04/16.04 | Horizon Agent 7.8 or later |
| SLED/SLES 12.x SP3 | Horizon Agent 7.8 or later |
Configuring True SSO
- Set up and configure True SSO in your Horizon 7 environment. See "Setting up True SSO" in the Horizon 7 Administration document.
- Integrate your desktop with an AD domain, following the procedure for your Linux distribution.
- Configure True SSO on your desktop, following the procedure for your Linux distribution.
