The True Single Sign-on (True SSO) feature grants users access to a Linux virtual desktop or a published desktop or application after they first log in to VMware Workspace ONE. Users can log in to VMware Workspace ONE using a smart card or RSA SecurID or RADIUS authentication, and then access remote Linux resources without entering their Active Directory credentials.

Overview of True SSO

If a user authenticates by using Active Directory (AD) credentials, the True SSO feature is not necessary. However, you can configure True SSO to be used even in this case, so that the desktop can support both AD credentials and True SSO.

When connecting to a Linux virtual desktop or a published desktop or application, users can select to use either the native Horizon Client or HTML Access.

System Requirements for True SSO

True SSO is supported on desktops running the following Linux distributions with the specified versions of Horizon Agent installed.

Linux Distribution Horizon Agent
RHEL/CentOS 8.1 Horizon Agent 7.12 or later
RHEL/CentOS 8.0 Horizon Agent 7.11 or later
RHEL/CentOS 7.x Horizon Agent 7.6 or later
Note: True SSO is supported on RHEL/CentOS 7.x desktops only with the following join methods: the default join domain tools, Samba, System Security Services Daemon (SSSD), and the Kerberos network authentication protocol.
Ubuntu 20.04/18.04/16.04 Horizon Agent 7.8 or later
SLED/SLES 12.x SP3 Horizon Agent 7.8 or later

Configuring True SSO

To set up True SSO on your Linux desktop, perform the following tasks.
  1. Set up and configure True SSO in your Horizon 7 environment. See "Setting up True SSO" in the Horizon 7 Administration document.
  2. Integrate your desktop with an AD domain, following the procedure for your Linux distribution.
  3. Configure True SSO on your desktop, following the procedure for your Linux distribution.