Publish WebXR Applications

WebXR applications can be accessed via XR Hub and are run in a WebXR compatible browser, such as Wolvic, installed on the VR device.

To publish a WebXR application to XR Hub, deploy XR Hub and a compatible WebXR browser and create a Web Application either in Workspace ONE Access or via the XR Hub application configuration. For seamless access to WebXR applications, configure Single Sign-On (SSO) for your 3rd party browser.

Configure a WebXR Browser

XR Hub requires a 3rd party WebXR compatible browser to launch WebXR applications such as Wolvic. To configure XR Hub to use a WebXR browser, use the Application Configuration settings within the XR Hub application assignment in Workspace ONE UEM.

1. In the Workspace ONE UEM console, navigate to Resources > Apps > Native and select the Internal tab.
2. Select the current version number of XR Hub (for example “23.4.0.0”) in the UEM Version column. The App Details View displays.
3. Select the Assign button at the top right of the Details View to launch the assignment window.
4. Select the Assignment Name to edit the XR Hub configuration for that assignment.
5. Select the Application Configuration tab. Enable the Send Configuration slider to edit the XR Environment settings.
6. Select CONFIGURE next to the WebXR Browser Configuration settings item.

7. Edit the WebXR Browser Configuration settings.

   • Define what WebXR browser or package should be used to launch WebXR applications from XR Hub.
   • The settings below can be used for the Wolvic VR Browser on Meta Quest or PICO devices:

   

   Note: It should be noted that any browser application should be configured for Single Sign-On (SSO) to avoid the user from being presented with a Workspace ONE password login flow (if using Workspace ONE Access).

Configure a WebXR browser for SSO

If you are using Workspace ONE Access to publish WebXR applications, you will need to setup Single Sign-On (SSO) for your WebXR browser. When launching WebXR applications from XR Hub, the initial application launch URL points to Workspace ONE Access, which secures the application launch and ensure only your users have access to the link.

In order to provide seamless access and avoid users from being prompted to log in, set up the 3rd party browser for Single Sign-On. This can only be done on devices managed by Workspace ONE UEM.

Once that is done, you can set up your 3rd party browser for SSO.

1. In the Workspace ONE UEM console, navigate to Resources > Apps > Native and select the Internal tab.
2. Select the current version number of XR Hub (for example “23.4.0.0”) in the UEM Version column. The App Details View displays.
3. Select the Assign button at the top right of the Details View to launch the assignment window.
4. Select the Assignment Name to edit the XR Hub configuration for that assignment.
5. Select the Tunnel tab.
6. For Android select the Tunnel Profile that has been created.
7. Finish by Selecting Save then Save then Publish

Update Tunnel Traffic Rules for SSO

1. In the Workspace ONE UEM console go to Groups & Settings > Configurations > Tunnel.

2. Configure the following settings.

   a. Under Device Traffic Rule Sets Select Edit and Select Default.

   b. If a Bypass rules does not already exist, add it by changing the Action for Application, All Other Apps to BYPASS.

   c. If a Proxy Rule already exists, edit that, otherwise Select Add Rule.

   Setting	Description
   Application	Select the browser application for which to enable SSO
   Action	If not already set, change the setting to PROXY.
   Web Proxy	If not already set, enter the web proxy address: certproxy.workspaceoneaccess.com:5262 (SaaS) or certproxy.ws1.mycompany.com:5262 (on-prem example)
   Destination	If not already set, enter the FDQN of the Workspace ONE Access server with a wildcard asterisk. For example: *mycompany.workspaceoneaccess.com* (SaaS) or *ws1.mycompany.com* (on-prem)

   d. Select Save, OK and then Close.

Publish WebXR Applications with Access (Recommended)

1. Login to the Workspace One Access Admin Console as your tenant admin.
2. Navigate to Resources > Web Apps.
3. Select New and it will display the New SaaS Application window.

4. Add the WebXR App Settings

   a. Add a Name for your application.

   b. Upload an Icon for your application.

   c. Add the application to a category called “WebXR” or “XR Apps”.

   d. Select Next

5. Add the WebXR Configuration Settings

   a. Select Authentication Type and select “Web Application Link”.

   b. Enter the Target URL for your WebXR application.

   d. Select Next

6. Assign Users/Groups to the WebXR Application

   a. Select Save and Assign.

   b. Type the users / groups you want to assign the WebXR application to.

   c. For Deployment Type Select Automatic.

   d. For Entitlement Type Select Include.

   e. Select Save.

Publishing WebXR Applications without Access (Optional)

If not using Workspace ONE Access, WebXR Applications can be configured in Workspace ONE UEM using the XR Hub application configuration.

1. In the Workspace ONE UEM console, navigate to Resources > Apps > Native and select the Internal tab.
2. Select the current version number of XR Hub (for example “23.4.0.0”) in the UEM Version column. The App Details View displays.
3. Select the Assign button at the top right of the Details View to launch the assignment window.
4. Select the Assignment Name to edit the XR Hub configuration for that assignment.
5. Select the Application Configuration tab. If not already enabled, click on the Send Configuration slider to edit the XR Environment settings.
6. Select CONFIGURE next to the Applications settings item.

7. Edit the WebXR Application settings.

   Setting	Description
   Application Type	WebXR
   Name	Enter a name for the application, such as “IWWG Immersive VR Session”
   URL	Enter the URL for the application, such as https://immersive-web.github.io/webxr-samples/immersive-vr-session.html