Overview of Workspace ONE Access and Active Directory Federation Services Integration

Integrating Workspace ONE Access with Active Directory Federation Services allows organizations to manage access to enterprise applications and resources with conditional user and device access policies.

About VMware Workspace ONE

VMware Workspace™ ONE™ is a secure enterprise platform that delivers and manages applications on iOS, Android, Windows 10, and Mac OS devices. Identity, application, and enterprise mobility management are integrated into the Workspace ONE platform.

VMware Workspace ONE Access and VMware Workspace ONE™ UEM are part of the Workspace ONE platform. As the identity component of Workspace ONE, VMware Workspace ONE Access provides enterprise identity integration and web and mobile single sign-on (SSO) services.

About the Integration Process

VMware Workspace ONE Access has the capability to act as a standalone federation identity provider (IdP). It can also integrate with existing IdP and SSO solutions like Active Directory Federation Services as a federated IdP or service provider (SP). When configured in this way, Workspace ONE can provide augmented services such as a unified application catalog and conditional access policies based on device posture.

With the flexible identity policies of VMware Workspace ONE Access and Active Directory Federation Services, either identity provider can authenticate login requests depending on the scenario. For example, you can configure VMware Workspace ONE Access to authenticate users of mobile devices, while Active Directory Federation Services continues to authenticate desktop users. This flexibility gives you the benefits of Workspace ONE integration in key areas while maintaining your existing Active Directory Federation Services workflow in other scenarios.

This guide provides step-by-step instructions on how to configure and test use cases supported by the Workspace ONE integration with Active Directory Federation Services. To perform the integration, you integrate VMware Workspace ONE Access, the identity component of Workspace ONE, with Active Directory Federation Services.