The tasks to deploy and set up Workspace ONE Access require that you perform the prerequisites, deploy the Workspace ONE Access OVA file, and finish the setup from the Workspace ONE Access Setup wizard.

Figure 1. Workspace ONE Access Architecture Diagram for Typical Deployments
Important: Citrix, Horizon Connection Server, and ThinApp integrations are not available with the Workspace ONE Access 20.01 connector.
  • To use ThinApp packaged applications, use the VMware Identity Manager connector (Linux) version 2018.8.1.0.
  • To use other Virtual Apps, such Horizon desktops and applications or Citrix published resources, use the VMware Identity Manager connector (Windows) version 19.03.
  • If you plan to enable certificate or smart card-based authentication, use the SSL pass-through setting at the load balancer, instead of the terminate SSL setting. This configuration ensures that the SSL handshake is between the Workspace ONE Access connector and the client.
  • Depending on the location of the Workspace ONE UEM deployment, the Workspace ONE UEM REST APIs can be in the cloud or on premises.
  • For information about configuring and enabling Kerberos authentication in Workspace ONE Access, see Managing VMware Workspace ONE Access User Authentication Methods.