To preare for day zero onboarding in Workspace ONE Access, you configure the pre-hire authentication method and enable the web apps in the catalog that pre-hires can access from the Hub catalog.

You configure Workspace ONE Access APIs to set up the authentication token used as the authentication method and to set up the magic link used to access the New Hire Welcome page.

  • Configure the API to enable the Token Auth authentication method in Workspace ONE Access that is used for day zero onboarding.
  • Configure the API to create the magic link. Two different API actions can be configured, an API that creates the magic link and emails the link to the pre-hire user, and an API that creates the magic link token that you add to the email that you send to the pre-hire users.

After the APIs are configured, you complete the configuration from the Workspace ONE Access console. You enable Token Auth and add it to the built-in identity provider that is associated with the directory that is syncing the pre-hire user group from Active Directory. You edit the default access policy to create a rule for pre-hires to get one-time access to the magic link. You entitle pre-hires to apps that can be access in the Hub catalog.