Adding an AD FS-federated application to the catalog makes it possible for end users to access the application alongside other enterprise applications from the Workspace ONE portal. You must repeat this procedure for each application that you want to add to the catalog.

Prerequisites

Procedure

  1. Log in to the VMware Workspace ONE Access console with full administrator privileges.
  2. Select the Catalog > Web Apps tab.


  3. Click New.
  4. On the New SaaS Application wizard's Definition page, enter the following information.
    Option Description
    Name Enter a name for the application.
    Description (Optional) Enter a description of the application.
    Icon (Optional) Upload an icon.
    Category (Optional) To add the application to a category, select it from the drop-down menu.


  5. Click Next.
  6. On the Configuration page, enter the following information.
    Option Description
    Authentication Type Select ADFS Application Source.
    Target URL Enter the URL of the application in this format: RPID={AppIdentifier}, where {AppIdentifier} is replaced with the application's relying party identifier that you obtained previously from the AD FS Management console.
    Open in VMware Browser Set to No.


  7. Click Next.
  8. On the Access Policies page, select the access policy that you want to use for the application, and then click Next.
    For more information about access policies, see the Managing Workspace ONE Access User Authentication Methods guide .
  9. Review your selections and click Save, or click Save & Assign to assign the application to users and groups.
    If you do not assign the application to any users and groups now, you can do so later by selecting the application on the Catalog > Web Apps page and clicking Assign.
  10. Verify that the application is added to the catalog.
  11. Repeat this procedure for each application that you want to add to the Workspace ONE catalog.

What to do next

Using a test user account, navigate to your organization's Workspace ONE portal. From the application catalog, issue an IdP-initiated authentication request by opening the target AD FS-federated application. Verify that you are successfully redirected to the application's login portal.

For more information about IdP-initiated authentication flows, see IdP-initiated and SP-Initiated Authentication Flows.