Deployment Scenario for Horizon Cloud Integration with Workspace ONE Access

To integrate Workspace ONE Access with Horizon Cloud Service on Microsoft Azure with Single-Pod Broker or Horizon Cloud Service on IBM Cloud, you need a Horizon Cloud tenant, a Workspace ONE Access tenant, and a Workspace ONE Access connector. You must install the connector on premises with line-of-sight to the Horizon Cloud tenant.

Important: Only Workspace ONE Access connector version 19.03.0.1 supports this integration.

Figure 1. Horizon Cloud Integration with Workspace ONE Access

1. The Workspace ONE Access connector syncs user and group information from Active Directory to the Workspace ONE Access tenant.
2. The connector syncs Horizon Cloud user and group entitlements from the Horizon Cloud tenant to the Workspace ONE Access tenant.
3. The end user accesses a desktop or application as follows:
   1. The end user logs into the Intelligent Hub app or portal and clicks on a desktop or application.
   2. The Workspace ONE Access service generates a launch URL and passes it to the Horizon Client. The launch URL includes a SAML artifact ID.
   3. The Horizon Client accesses the launch URL.
   4. The Horizon Cloud tenant receives the request and validates the SAML artifact ID with the Workspace ONE Access service.
   5. If the SAML artifact ID is validated by the Workspace ONE Access service, the desktop or application is streamed to the Horizon Client by the Horizon Cloud tenant.

About the Workspace ONE Access Connector Requirement

Before you can integrate your Horizon Cloud tenant with Workspace ONE Access, you must install the Workspace ONE Access connector on premises. The connector is required to sync resources and entitlements from Horizon Cloud to your Workspace ONE Access tenant as well as to sync users and groups from Active Directory to your Workspace ONE Access tenant.

Install Workspace ONE Access connector version 19.03.0.1. See Installing and Configuring VMware Identity Manager Connector 19.03 (Windows) for information.

Important: Do not install a later version as later versions do not support integration with these types of Horizon Cloud Service environments.

After you install and configure the connector, create a directory in your Workspace ONE Access tenant and sync the Active Directory users and groups that have Horizon Cloud desktop and application entitlements.