Requirements

You must meet certain system requirements before beginning the Workspace ONE and Active Directory Federation Services integration.

Components

The following components are required.

• A Workspace ONE UEM tenant (administrator role required)
• A VMware Workspace ONE Access tenant (administrator role required)
• AirWatch Cloud Connector (ACC)
• VMware Workspace ONE Access connector
  Note: If your existing deployment syncs users to VMware Workspace ONE Access from Workspace ONE UEM, the VMware Workspace ONE Access connector is not required. For new deployments, use the VMware Workspace ONE Access connector to sync users from Active Directory to VMware Workspace ONE Access.
• Microsoft Active Directory Federation Services (administrator role required)

Workspace ONE UEM and VMware Workspace ONE Access Integration

Integrate your Workspace ONE UEM and VMware Workspace ONE Access tenants and configure the mobile single sign-on (SSO) authentication methods that you intend to use for device trust.

Active Directory Integration

Before integrating Workspace ONE with Active Directory Federation Services, integrate your Active Directory and sync users. You must integrate Active Directory with:

• Workspace ONE UEM using AirWatch Cloud Connector (ACC)
• VMware Workspace ONE Access using VMware Workspace ONE Access connector (for new deployments)
  Note: If your existing deployment syncs users to VMware Workspace ONE Access from Workspace ONE UEM, you do not need to use the VMware Workspace ONE Access connector to sync users.

Ensure that you sync the same users to all the environments.