Managing Configuration of Password Authentication with Workspace ONE UEM in Workspace ONE Access

Password Authentication with Workspace ONE UEM authenticates using AirWatch Cloud Connector through the Workspace ONE UEM service. You enable this User Password Authentication through Workspace ONE UEM in the Identity & Access Management > Workspace ONE UEM page in the Workspace ONE Access console.

Important: The Password Authentication with Workspace ONE UEM authentication method does not work when Workspace ONE UEM is unreachable or unavailable for any reason, including planned maintenance and unplanned outages.

The Password (with Workspace ONE UEM) authentication method can be viewed and managed from the Identity & Access Management > Authentication Methods page and is associated to the built-in identity provider in the Identity Providers page.

Procedure

1. In the Workspace ONE Access console Identity & Access Management tab, select Authentication Methods.
2. In the Password (with Workspace ONE UEM) Configure column, click the pencil icon.
3. Review the configuration.

   Option	Description
   Enable Workspace ONE UEM Password Authentication	This check box enables Workspace ONE UEM password authentication.
   Workspace ONE UEM Admin Console URL	Pre-populated with the Workspace ONE UEM URL.
   Workspace ONE UEM API Key	Pre-populated with the Workspace ONE UEM Admin API key.
   Certificate Used for Authentication	Pre-populated with the AirWatch Cloud Connector certificate.
   Password for Certificate	Pre-populated with the password for the AirWatch Cloud Connector certificate.
   Workspace ONE UEM Group ID	Pre-populated with the organization group ID.
   Number of authentication attempts allowed	The maximum number of failed login attempts when using the Workspace ONE UEM password for authentication. No more login attempts are allowed after the failed log ins reach this number. The Workspace ONE Access service tries to use the fallback authentication method if it is configured. The default is five attempts.
   JIT Enabled	If JIT is not enabled, select this check box to enable just-in-time provisioning of users in the Workspace ONE Access service dynamically when they log in the first time.

4. Click Save.
   Important: When the Workspace ONE UEM service details applicable to this authentication method change, make sure that you update the Workspace ONE UEM configuration in the Workspace ONE Access console. Otherwise this authentication method might fail.