In Workspace ONE Access, a directory of type Other can be converted to a directory of type Active Directory over LDAP or Active Directory over Integrated Windows Authentication. Use this feature if you are a Workspace ONE customer who has deployed Active Directory synchronization with Workspace ONE Access using AirWatch Cloud Connector (ACC) and want to take advantage of the additional functionality included with the Workspace ONE Access connector.

This one-time migration procedure converts the ACC directory of type Other to a directory of type Active Directory over LDAP or Active Directory over Integrated Windows Authentication, which are associated with the Workspace ONE Access connector. This procedure does not remove the existing directory or any entitlements associated with it.

Converting the Other directory for this use case includes the following tasks.

  1. Install the Directory Sync service and the User Auth service, which are components of the Workspace ONE Access connector beginning with version 20.01.0.0. See the latest version of Installing Workspace ONE Access Connector for information.
  2. Convert the Other Directory to Active Directory over LDAP or Active Directory over Integrated Windows Authentication.
  3. Configure additional authentication methods for the directory, if necessary. The Password (cloud deployment) authentication method is available by default when you install and select the User Auth service in addition to the Directory Sync service.
  4. Edit the default policy and any custom policies to use Password (cloud deployment) instead of Password (AirWatch Connector).
  5. Stop user and group sync from Workspace ONE UEM to the Workspace ONE Access directory.
Important:
  • This feature is only applicable to directories that contain users synced from Active Directory. It is not applicable to directories that contain UEM Local Basic Users.
  • This feature is not applicable to directories that contain users synced from LDAP directories such as OpenLDAP. It is only applicable to Active Directory over LDAP and Active Directory over Integrated Windows Authentication.