You can configure a third-party identity provider to manage user identity and authentication for single sign-on to Workspace ONE.

Workspace ONE Access supports identity providers that are compatible with the SAML 2.0 and OpenID Connect 1.0 protocols.

  • SAML. Security Assertion Markup Language (SAML) is a protocol that transfers a user's identity between the identity provider and the service provider in XML documents called SAML assertions. SAML 2.0 offers single sign-on support and federated authentication.
  • OpenID Connect. OpenID Connect (OIDC) is an authentication protocol based on OAuth2. OpenID Connect protocol enables clients to verify the identity of users based on the authentication performed by an Authorization server. The basic profile information about the user identity is then encoded in a JSON Web token (JWT).