RSS
 

Freestyle Orchestrator

Use Freestyle on Intelligence (also called Workflows) to automate actions from third-party services and connectors you’ve integrated and registered with Intelligence. To use workflows, register your service or connector and then configure the workflow with specific triggers and actions.

What is Freestyle Orchestrator?

Freestyle Orchestrator on Intelligence (formerly Intelligence Automations) is a low code, no code workflow platform that helps IT admins automate complex business use cases by sequencing tasks based on a trigger. Triggers initiate manually, on a schedule, or automatically caused by events from a number of connectors (Workspace ONE or third-party services).

Before you use Freestyle, ensure your Workspace ONE instance is fully configured by setting up all your data source and workflow connectors. Authorize your Workspace ONE and third party connectors in the Integrations section.

In the Intelligence console, go to the Integrations section to see what Data Sources and Workflow Connectors are available so you can use their associated actions in your workflows

Workflow components

To get the most out of your workflow experience, it’s important to have an understanding of the building blocks within a workflow. A workflow consists of a trigger caused by a state change or trend that initiates a set action through Workspace ONE or an integrated third-party service.

Trigger - The Freestyle capabilities in Workspace ONE Intelligence monitor incoming and existing data that trigger a workflow. You can customize the workflow to act on unique scenarios in your Workspace ONE environment and third-party services. The triggers act on states that reflect their configuration immediately after you save them. Workflows can then monitor data for state changes and act as configured.

Actions - Workflows offer many actions that help solve problems related to daily IT tasks, deployment, and compliance across Workspace ONE and third-party products. The workflow engine executes actions in a sequential order based on the configuration within the workflow canvas.

To learn more about the technical architecture of the Freestyle Orchestrator system read this Tech Zone blog.

Step 1: Registering services and connectors

Add third-party services, managed connectors, or custom connectors so that you can use their actions in workflows. See the applicable topic to learn how to register the connector.

Connectors Available in the UI
Data Sources

Workspace ONE Hub Services
Workspace ONE Intelligence
Workspace ONE Mobile Threat Defense
Workspace ONE UEM
BETTER Mobile
Carbon Black
Check Point
Employee Experience (DEEM)
Horizon
Lookout
Netskope
Pradeo
Wandera
Zimperium		 The UI lists available data sources when you begin to configure a workflow in the workflow canvas
Workflow Connectors

Custom Connectors
Workspace ONE Hub Services
Workspace ONE UEM
ServiceNow
Slack Web API		 You must register a workflow connector before you can use its actions in workflows.

Step 2: Setting up a new workflow

Start automating your IT environment by setting up a workflow using the workflow canvas.

  1. In Workspace ONE Intelligence, navigate to Workspace > Freestyle > Add Workflow. Find Freestyle prominently in the left navigation and use it to access the workflow canvas.
  2. Enter a name for your workflow.
  3. Set up the trigger with the desired data source or explore templates for new ideas.
    • If starting from a template, use the filters or search to narrow the template based on your use case.
    • For example, you can select the options Devices > Battery and select from the listed templates.
  4. View the Trigger Settings and select the trigger settings.
    Important:When you use Manual or Schedule trigger types, a Run button displays to allow manual execution as needed. Due to throttling limits, you cannot perform this action more than once per hour for the same workflow.
    • Automatic - Automatically execute the workflow when incoming events match the trigger rule. Select whether this trigger should execute on existing data upon save or only on new incoming data. This menu item is supported for all integration types. Automatic triggers act on real time event data as it is received from the selected data source.
    • Schedule - Define when the workflow runs. The data from the reports data warehouse provides snapshot and historical data for Freestyle when setting up scheduled workflows.
    • Manual - Execute the workflow on-demand (good for one-time actions). The data from the reports data warehouse provides snapshot and historical data for Freestyle when setting up manual, one-time workflows. Configure when you want the workflow to act on identified data, automatically, during a schedule time, or manually.
  5. Configure the Trigger Rule with the desired filter options. This step is critical because the workflow targets the data set based on the selected data source and data filter. The trigger rules available in the list depend on the data source chosen.
  6. Select to Refresh the Potential Impact menu item at the top of the canvas. The potential impact is the number of all targets that match the filter at the moment. The potential impact results depend on the Trigger Settings selected.
    Use the Potential Impact feature to see a preview of targets, which can change, that match your workflow filters.
    • Automatic - The potential impact displays all targets, but the automation executes only for new targets that haven’t been included in a previous run.
    • Schedule - The potential impact includes all targets at the time of execution.
    • Manual - The displayed number of potential impacts are the actual number of targets for which the automation runs.
  7. Select to View the Potential Impact results to see the preview of targets if there are targets to see.
    • Although a target displays in the potential impact preview, if its status changes and it no longer matches the trigger rule, it is no longer a target and Intelligence does not include it when the workflow runs.
    • Use Group by to group the data by data attributes across your Intelligence data. For example, you can group data by device data or app data.
    • Use the arrow to close the Potential Impact results. Intelligence displays the workflow targets that match your filters. Arrow out of the preview to return to the workflow canvas
  8. Add an Action by dragging and dropping the Action icon from the resources on the left or using the + Add Step icon on the canvas. The workflow performs this action when it identifies the trigger. Select from various ways to add an action, wither drag and drop from the Action option or use the + icon.
  9. Select a Connector and choose an available action from that connector. Select actions from connectors that you registered previously.
  10. Save the workflow. See the activation toggle for the workflow near the name. You can activate the workflow at any time. Activate a workflow immediately or after you know your system has the events in your trigger rule.

After you save your settings, the workflow immediately scans data and acts on filters that match the configured criteria. It then continues to monitor data for the criteria and continues to execute actions accordingly.

What is the difference between Workflows and a compliance engine?

  • Workflows - Its decision engine acts on triggers from devices and applications to automate actions across the digital workspace environment.
    • You can extend the decision engine to third-party services. Use the Freestyle platform to define workflows for device-category scenarios like battery percent and ownership and to install applications and other resources in your Workspace ONE deployment.
    • You can also use it in scenarios that encompass various facets of your Workspace ONE deployment. Use it to install or remove applications and profiles for security, notify interested teams about workflows, and extend these capabilities to third-party solutions.
  • Compliance - Its engine acts on closed-loop workflows where a user can have resources returned after becoming compliant again.
    • Use compliance in scenarios focused on remediation and device state.
    • Use it to force devices to comply with mandated security policies. Remove resources until devices comply with set compliance rules that return them to a working state.

FedRAMP consideration

The NIST Special Publication 800-47 Rev.1: Managing the Security of Information Exchanges defines a system interconnection as the direct connection of two or more IT systems for the purpose of sharing data and other information resources.

Connecting IT systems is a customer configured capability. Before you connect IT systems in Workspace ONE Intelligence, discuss the risks of connecting non-FedRAMP accredited information systems with your Authorizing Official. Workspace ONE on AWS GovCloud, and by extension, Workspace ONE Intelligence is a FedRAMP Moderate, accredited information system. When you connect information systems to other systems with different security requirements and controls, carefully consider the risks.

Contact the Federal Support line (877-869-2730 OPTION 2) or submit a support request using My Workspace ONE for more details and to enable customer-controlled third party connections to other systems.

check-circle-line exclamation-circle-line close-line
Scroll to top icon