You enable Approvals from the Catalog Web Apps Settings page and configure licensing in the application to manage access to applications that require approval from your organization.

When the licensing option is configured, users view the application in their Workspace ONE catalog and request use of the application. The application icon display a Pending notification

VMware Identity Manager sends the approval request message to the organization's configured approval REST endpoint URL. The server workflow process reviews the request and sends back an approved or denied message to VMware Identity Manager. When an application is approved Pending is changed to Added and the application displays in the user's Workspace ONE launcher page.

Two approval engines are available.

  • REST API. The REST API approval engine uses an external approval tool that routes through your Webserver REST API to perform the request and approval responses. You enter your REST API URL in th eVMware Identity Manager service and configure your REST APIs with the VMware Identity Manager OAuth client credential values and the callout request and response action.
  • REST API via Connector. The REST API via Connector approval engine routes the callback calls through the connector using the Websocket-based communication channel. You configure your REST API endpoint with the callout request and response action.....

You can view the VMware Identity Manager resource usage and resource entitlements reports to see the number of approved applications being used.