This FAQ answers frequently asked questions about how to use the features in the Workspace ONE Intelligent Hub application.
A number of these features require customization by your IT administrator so your specific use cases might differ from what is described in these FAQ answers. Some features might not be available for all users. If you have questions or want some of these features enabled, reach out to your IT administrator.
I'm new. Start Here.
What is Workspace ONE Intelligent Hub?
The Workspace ONE Intelligent Hub app can be installed on iOS, Android, macOS, and Windows devices and allows you to access, discover, and connect with corporate resources, teams, and workflows within your company. Using this app enables you to be productive while staying compliant with your company’s security policies.
If your company enabled access from the Hub web browser, you can access your web applications, notifications, and support information from the Hub portal in a browser.
Why do I need Workspace ONE Intelligent Hub?
You need the Workspace ONE Intelligent Hub app to be able to add work resources on your devices. The device can be your laptop or desktop as well as your mobile device. Your company is using Workspace ONE Intelligent Hub to configure, secure and deploy their work tools onto your device to improve your employee experience.
- Favorites – Bookmark apps and other services you use frequently and want to easily access.
- Apps – Provides you with a unified catalog of available native, web, and virtual applications that your company deployed as your work tools.
- For You – Provides a notification center where you can receive company administered push and in-app notifications.
- People – Provides you with quick access to colleague’s information through an employee directory. You can also see the colleague’s organization chart with name, email, phone.
- Self-Service Support – Provides helpful links to help you perform basic device management tasks when you need help with any of your devices. You can find information about who to contact if you have problems with your enrolled device.
- Home – Gives you access to your company resources by linking to an intranet or company portal.
What about my privacy?
Privacy is a fundamental right and VMware believes that you should have complete control and visibility into the information you share.
If your company has given you the choice to use one device for work and personal use, there may be information you want to keep personal. Workspace ONE works to provide complete transparency into what data is being collected, through a privacy notice built into each of our apps. The privacy notice is presented when you are first getting started in the app. Anytime a change is made that could impact your privacy you will be alerted, and you can review the privacy notice at any time.
Your IT department selected Workspace ONE because it protects them and you. Your company’s priority is to secure the corporate apps and data on your device, while only capturing the minimal amount of information needed to do that.
Make sure to read VMware's Privacy Policy for the most up to date information: https://www.vmware.com/help/privacy.html
Can Workspace ONE Intelligent Hub see my browsing history?
The Workspace ONE Intelligent Hub application does not monitor your personal browsing traffic. If you are using company resources (including device management) there is a chance that your company might have other systems that monitor traffic into and out of their network. Some of these applications that are on your device (e.g. utilizing proxies, Tunnel SDK or VPN) transfer data through your company's network.
What if I delete Workspace ONE Intelligent Hub?
Depending on your company's configuration of the Workspace ONE Intelligent Hub app, merely deleting the app could have a negative impact on the behavior of the device and applications.
If the intent is to remove work resources from your device, unenroll the device from Workspace ONE UEM device management. You might be able to do so through the Workspace ONE Intelligent Hub app or by reaching out to your IT admin.
If you deleted the app from your device without unenrolling from Workspace ONE UEM, you might be able to download it again and log back in to access your work resources again.
How do I log into Workspace ONE Intelligent Hub?
Before you can log in to Workspace ONE Intelligent Hub, your administrator must create an account for you in their system and let you know what credentials are required to access the app. The login credentials that you use for Workspace ONE Intelligent Hub might be the same used to access other company systems but could also be unique.
Some companies allow all employees access to the work resources on all their devices. Companies can also require that you request access to resources for multiple devices.
If you use a computer that is configured with Workspace ONE, logging into the computer for the first time can include configuring Workspace ONE Intelligent Hub and downloading all your work applications and configuring access without having to visit IT.
Apps are being added and deleted automatically from my device. What’s going on?
When you use the Workspace ONE Intelligent Hub app to enroll your device into Workspace ONE UEM, applications and configuration profiles can be deployed to your device where they automatically install in the background. When applications are deemed unnecessary or you have unenrolled your device, apps can disappear from your device.
I don't see my question here, what can I do?
First off, thank you for your inquiry to help improve our products.
Reach out to your IT administrator and they can escalate questions to us. We want you to talk to your IT admin because there are several ways that your company can configure our software to fit their needs. If they determine that your question is not something they are able to resolve, they can reach out to our teams to collaborate on a solution.
Enrollment and Login
My company gave me a QR code to use, how does that help me?
This QR code, if generated by our system, allows you to scan the code with the Workspace ONE Intelligent Hub app for Android or iOS devices to prefill in most information or even log you into your account to begin the configuration process on your device.
How do I enroll (first time login and setup) into Workspace ONE Intelligent Hub?
There are several ways to enroll into Workspace ONE Intelligent Hub. Follwoing are the most common ones.
- Email Address
This method allows you to simply enter your corporate email and behind the scenes, the Workspace ONE Intelligent Hub app finds the correct environment details for your company and allows you to complete the authentication.
- Server Name
You provide the specific server name/URL that your company provisioned and possibly a Group ID, which narrows down the exact location where you are registering.
- QR Code / Deep Link
A streamlined way which pre-fills the information such as the server URL and Group ID without having you type it.
What can I do when I get the "Device Not Approved" message?
Your organization can evaluate the type of devices to approve. They can regulate the number of devices, the type of device (platform, model, manufacturer), the minimum operating system version, or other restrictions to determine which devices are allowed to enroll.
Contact your admin to find out what devices are supported. In general, recent devices with the most up to date operating systems are supported.
How can I unenroll or completely remove work data from my device?
Depending on how your organization is configured, you might be able to unenroll yourself.
To unenroll
- Launch Workspace ONE Intelligent Hub.
- Navigate to the Support Tab or the Account section via the icon at the top right hand corner.
- Select your current device.
- Select "Enrollment".
- Tap "Unenroll Device".
This process can take a few seconds to a couple of minutes to remove all the corporate information from the device.
If you are on a Bring Your Own Device (BYOD) setup and your IT admin has configured this, only your work information is deleted. All of your personal information stays on the device.
If I unenroll, will it affect any of my personal data on my device?
This depends on your organization's configuration. If your IT admin configured the device for Bring Your Own Device (BYOD) then your personal data remains on the device after you unenroll your device. If your IT admin configured the company owned device to wipe completely, any personal data on that device will be lost.
What is a Check In/Check Out system?
Check In/Check Out is a system that is generally used when there are multiple users of a single device. Think of the situation where someone clocks in, checks out a device, performs their job and once the job is complete, they check the device back in and clock out.
This means that anyone set up for Check In/Check Out can pick up any device configured with Check In/Check Out, log in and do their job. If that device breaks or the battery runs out, they can check out another device and log in as easily as they did to the first one and get access to all their same work tools.
Why do I need a password/passcode?
Passwords or passcodes can be required to unlock your device and can also be required to open Workspace ONE Intelligent Hub apps that are on your device.
In either case, if your organization enabled this as a security requirement, you set a passcode for your device (which enables device level encryption) and also set an app-level passcodes to secure the Workspace ONE Intelligent Hub app.
What credentials do I use?
This really depends on your organization's configuration.
Typically, it will be your Active Directory credentials or a specific username/password for the Workspace ONE system.
Other options might be a single-use token, MFA/2FA, or a certificate.
If you are uncertain, check with you IT administrator.
What is the difference between Corporate owned and Employee owned?
Corporate owned devices are devices that are owned by your company. Corporate owned devices are often fully managed and controlled either from the manufacturer or with our software. It is not recommended to store any personal information on these types of devices because companies can completely factory reset these devices.
Employee owned or Bring Your Own Device (BYOD) use cases are where you bring your personal device and are able to enroll your device to add your work resources on your device. All your personal information and data is kept separate from the company’s data. Companies can remove corporate data from your device but are unable to remove your personal data.
There are other enrollment methods that are not as common such as Corporate Owned Personally Enrolled (COPE) where a company has full ownership over the device, but the intent is for one person to use that device for work as well as anything personal that they want to.
See our other FAQs on Privacy to learn about what information your company can and cannot see.
What is the difference between Device Managed, User Managed, and Registered?
Managed/Fully Manager/Device Managed is device management where VMware Workspace ONE leverages the platform APIs to manage the device.
Registered Mode is where a registration is created in Workspace ONE UEM via an “anchor application” like Workspace ONE Intelligent Hub to facilitate a lighter level of management.
Adaptive Management is a term used for when a device is moved from “Registered Mode”/ “MAM” to mobile device management (MDM), when end users request to select an app that requires management
Step-Up Enrollment is a comparable term used for Adaptive Management. This represents the process of stepping up from Registered Mode to MDM.
MAM-Only (Mobile Application Management), Unmanaged, Container, Standalone Boxer: Terms used to represent a non-MDM mode of enrollment/management
User Enrollment is an Apple specific enrollment implementation designed for BYOD where the user, not the company, owns the device.
Work Profile can be set up on an Android device to separate work apps and data from personal apps and data. With a work profile, you can securely and privately use the same device for work and personal purposes—your company manages your work apps and data while your personal apps, data, and usage remain private.
Why do I have to reauthenticate?
Your authentication credentials are configured to expire for various reasons, When the access token expires, you will be asked to reauthenticate. Examples of when you must reauthenticate.
- An app that requires a password to access is configured to require reauthentication after a configured specified time of in activity.
- You have not accessed your Workspace ONE Intelligent Hub app in a while and the refresh token has expired. In this case, you could be prompted to reauthenticate with Workspace ONE Access or your company's Identity Provider (Ping, Okta, Azure AD). Typically refresh token are set to expire after 7 to 10 days of inactivity.
- If you use Hash-based message authentication (HMAC), the HMAC token might be lost or has been invalidated. Workspace ONE Intelligent Hub requires you to reestablish your identity with the Workspace ONE UEM system.
What can I do if I get a message that says, "Invalid User Credentials"?
If you are seeing this message during the enrollment flow, the provided credentials do not match the expected input. This could be a situation where there's a different username/password/token combination.
For specific on how to address this sort of situation, contact your IT administrator.
Apps/Catalog/Favorites Tab
What is the App Catalog?
The Apps tab or the App catalog is a unified location for native, web, and virtual applications assigned to your user account.
Public native applications that can be downloaded from the App Store or Google Play Store, and white-label internal native applications that your company developed can be downloaded and installed from the Catalog.
Your company might also curate web apps (websites, web clips, or SaaS apps) for use in your job. Additionally, you might have virtual apps/desktops available to launch and use.
The App catalog allows you to install, launch, update as well as reinstall applications.
Hint: press the thumbs up icon to let others in the company know that you like a certain app! And you can press the star icon to add it to your Favorites Tab for easier access!
What types of apps can I have?
The Apps tab (App catalog) gathers together multiple types of apps and resources and will show or hide some based on the device you are on. Types of apps included in the App catalog.
- Native Applications. These apps display on the platform that supports them.
- Public - available in the platform's application store (ex. App Store, Google Play Store).
- Internal applications. - These apps are developed and deployed either by your company or specific for your company by a third party.
- Web Applications
- Websites
- Web clips
- SaaS apps
- Virtual Applications
- Horizon
- Citrix
- Saved Bookmarks - these are websites that you can add and bookmark for easy access via the Workspace ONE Intelligent Hub application on any supported platform.
How do I get/install/update my apps?
Apps that are natively built for your device can be installed from the Apps tab if you see an Install next to an app.
When you press Install, it will send a command to the server to push that application down to the device.
If you manually install apps from the App Store, there is a chance that you will have to approve management of that application so your company is able to securely deliver work resources.
When you see an "Update" option, a newer/later version of the application is available. Pressing "Update" will trigger an installation of the latest available version.
What is the Favorites Tab?
The Favorites tab is a tab that will show all the apps and websites that you starred in Workspace ONE Intelligent Hub. These favorites sync across all your devices so if you starred an item on the Hub web portal, that item will also show up starred on your mobile and computer versions ofWorkspace ONE Intelligent Hub. The starring feature can be found in the overflow menu of an app's icon or in the details page of that specific app.
Users are also able to save their own bookmarks that will show up in the Favorites tab on all devices.
The Favorites tab can be configured by your administrator therefore depending on configuration, features mentioned above might not be available for all users.
Will my Favorited (Starred) items also show up on my other devices?
Yes! Starred items and your bookmarks will show up across different devices if they are supported on that platform
Additional Hub Tabs/Features
What is the People Tab?
The People tab connects to your company's internal directory so you can search for and learn about colleagues, quickly contact them or see their team structure.
This tab requires configuration by your administrator therefore features mentioned above might not be available for all users.
What is the Home/Custom Tab? (Can be renamed by your company)
This is a tab that your admin can set to be a specific website that they determined is important for you. This could be an internal main company website or site that links to other essential resources. The name of the tab can be changed by your admin but presents as a full web page .
This tab requires configuration by your administrator therefore features mentioned above might not be available for all users.
What is the For You Tab?
For You is the tab where notifications your company has sent you are displayed. This can include notifications about new apps that you have access to or rich notifications that persist for a certain amount of time or include additional assets like surveys, images, videos, links, and other attachments.
Additional features of notifications in the For You tab include the ability to approve requests that come from other systems such as expense reporting, deal adjustments or other company specific use cases.
This tab requires configuration by your administrator therefore features mentioned above might not be available for all users.
What is Digital Badge?
Digital Badge enables you to use Workspace ONE Intelligent Hub on your mobile device to open doors of buildings on your campus. Currently this requires support from the badge-reader company as well your administrator.
This feature requires configuration by your administrator therefore features mentioned above might not be available for all users.
What is the Support Tab? (Can be renamed by your company)
The Support tab is your go-to place when you need help with any of your devices. Your admin can configure helpful links that display in this tab. You can see and manage your devices such as installing or reinstalling profiles and can include support contact information in the case you are unable to remedy your issue.
This tab requires configuration by your administrator therefore features mentioned above might not be available for all users.
[iOS] What is a Profile and why do I need to install it?
Profiles are sometimes required by your company to configure your device for things like email accounts, device passcode options and other functions like allowing you to connect to protected Wi-Fi networks without knowing the password or automatically configuring your VPN to access your company's internal network from your mobile device.
If you are not required to install an MDM profile when enrolling into Workspace ONE Intelligent Hub, your device is in Registered Mode. In this mode Workspace ONE Intelligent Hub serves as the main entry point for getting your company's resources. This allows you to still access company resources, but you might not have all services like Wi-Fi passcodes and access to internal resources on some system applications as these services might be device management specific features.
VMware makes other productivity applications that your company might have given to you (Boxer, Content, Web, PIV-D, Tunnel, etc.). These apps might also be auto configured for you after you log into Workspace ONE Intelligent Hub. For example, if you logged into Workspace ONE Intelligent Hub and then open your Boxer email application, Boxer will communicate with Workspace ONE Intelligent Hub in the background and seamlessly log you in.
