To use the push notification feature in the Hub Services Notifications service with on premises Workspace ONE Access deployments, you must register Workspace ONE Access to the cloud notifications service.

To register, you compete the following steps.

  • Generate and copy a CertificateSigningPortal token from VMware my.workspaceone.com.
  • Run a VMware Identity Manager API to generate a bearer token.
  • Run a Workspace ONE Notifications API with the generated tokens to register to the cloud notification services.

Procedure

  1. Log in to the VMware My Workspace ONE portal, https://my.workspaceone.com
  2. Navigate to https://my.workspaceone.com/mycompany/certificates/awinstall/authtoken.
    1. Click the menu in the top-right corner and select My Workspace ONE > CertificateSigningPortal.
    2. Click Authorize Install.
    3. Click Generate a token.
    Copy the token. This token is called MyWs1Token in the steps that follow.
  3. Run the VMware Identity Manager (AKA Workspace ONE Access) API to generate a bearer token.

    You generate the API and receive a response as described in this example.

    POST /SAAS/API/1.0/REST/auth/system/login
    Accept: application/json
    Content-Type: application/json
    Body:
    {
      "username": "admin",
      "password": "*** password ***",
      "issueToken": "true"
    }
     
    Response:
    HTTP/1.1 200 OK
    Date: Mon, 24 Aug 2020 10:08:42 GMT
    Content-Type: application/json
    {
    "id": null,
    "sessionToken": "eyJ0eXAiOiJKV1QiLCJh ... ZOdIE5qV8tS8rvbUUVeGw",
    "firstName": null,
    "lastName": null,
    "admin": false,
    "serverUrl": null,
    "signingCert": null
    }
    Copy the value of the sessionToken attribute. This token is called the bearer token in the following API code.
  4. Run the Workspace ONE Notifications API (Ws1Notifications) for register to the cloud notifications service.

    Replace ${BearerToken} with the token retrieved in step 3.

    Replace ${MyWs1Token} with the token retrieved in step 2.

    POST /ws1notifications/api/v1/cns/registration
    Authorization: Bearer ${BearerToken}
    Content-Type: application/json
    Body:
    {
      "token": "${MyWs1Token}"
    }
     
     
    Response:
    HTTP/1.1 204 No Content
    Date: Mon, 24 Aug 2020 10:28:42 GMT

Results

The Workspace ONE Access on premises service is registered to the cloud notifications service.