Follow the outlined procedures to get your Workspace ONE Cloud Admin Hub up and running. Access your VMware Cloud console to create and manage user accounts for the hub. Then, you can federate your corporate domain to use your organization’s SSO and identity source to sign-in to VMware Cloud services and the Workspace ONE Cloud Admin Hub.
After you make your subscription purchase (either through VMware Sales or through your partner) or after you request a trial, VMware sends a service welcome email to the email ID associated with the order or trial request.
Find your Welcome to Workspace ONE email that includes your unique service activation link. If you haven’t seen the email, check your spam messages or corporate spam filter. The unique service activation directs you to the VMware Cloud console. It is important to use this service activation link when you log in to the VMware Cloud console for the first time.
If you still cannot find the email, ask your VMware Sales Specialist or Customer Success Manager to resend the email or to provide you with the service activation link.
The service activation link provided to you in the welcome email directs you to the VMware Cloud console.
Click the service activation link provided to you in the welcome email.
Use the email and password from your My VMware account to log in. If you do not have a My VMware account, create one and fill in all mandatory fields.
A Cloud Services Organization is a container for all your services, and VMware Cloud services uses organizations to control access to your cloud services. To access a cloud service, you must belong to an organization. For details about organizations in VMware Cloud services, access the topic How do I manage my Cloud Services Organizations.
To join an organization, attach or join your Workspace ONE Cloud Admin Hub to a Cloud Services Organization so that you can access the Workspace ONE Cloud Admin Hub console.
After logging in to the VMware Cloud services console, you might see a list of organizations that you already have access to. This list can include organizations associated with services outside of Workspace ONE. Having access to organizations associated with and outside of Workspace ONE gives you the option to join your subscription with an existing organization or to create a new organization.
There are several benefits for you as an organization owner to having multiple subscriptions in a single organization.
By selecting an existing organization that includes other Workspace ONE service subscriptions, the services you are currently adding combine with services in the existing subscription. You now have a single view of your Workspace ONE services.
For example, if there is an existing subscription for Horizon and Access services and you have a new subscription for Workspace ONE UEM, then selecting the organization that includes Horizon and Access to use for the new UEM subscription combines all subscriptions. The organization now includes Horizon, Access, and UEM in a single view in Workspace ONE.
Before you add your current subscription to an existing one, view the considerations to see if this process meets your needs.
There are several reason why you create an organization rather than joining to an existing one. Create a new organization in these listed scenarios.
Depending on your subscription purchase, you can access one or more Workspace ONE services in the Workspace > My Workspace > Services area.
The Workspace ONE Cloud Admin Hub console is the main console that provides access to all your Workspace ONE services. When you select the initial activation link and create a Cloud Services Organization, the system creates an account for you with an Organization Owner role.
Workspace ONE Cloud Admin Hub is registered with VMware Cloud services, so you perform many of the initial setup steps for the Workspace ONE Cloud Admin Hub console in the VMware Cloud console.
Working as an Organization Owner in the VMware Cloud console, you can add other organizations, users, and assign these users to service roles within your organizations. You can also set up federation with your corporate domain. Federating your corporate domain allows you to use your organization’s SSO and identity source to sign-in to VMware Cloud services.
As an organization owner, you can invite additional users to your organization and assign them organization and service roles. Organization roles activates the user as a member of the organization. You can also assign them additional organization roles if applicable. Assigning a service role controls the access permissions (admin or basic) the user has to the organization and to the services within the organization.
Note: Unlike owners, users with organization roles cannot invite others to an organization.
Enable single sign-on for your users to access VMware Cloud services by federating multiple corporate domains. Use a self-service workflow to configure federation with VMware Cloud services in the Workspace ONE Cloud Admin Hub, the Getting Started section. The workflow supports integration with SAML 2.0 based identity providers. To learn more about the federation process, access What is enterprise federation and how does it work.
Setting up Enterprise Federation is a highly secure task so we have created a special role for this task. It is called the Enterprise Administrator role. As an organization owner, you must invite and assign someone to fill this roll. This person must have permissions to manage your corporate Active Directory or identity provider system. You can invite yourself if that person is you.
Your admin users can use your corporate identity to access VMware Cloud services.
Workspace ONE Cloud Admin Hub provides easy access to each of the Workspace ONE services you have purchased. It also allows you to discover and learn more about other services.
Workspace ONE Cloud Admin Hub provides access to Workspace ONE service consoles through the Workspace > My Workspace page. The service tiles you see when you select the My Services filter are the services you are entitled to use based on your subscription purchases. These service tiles are SSO enabled links. They sign you into your service console using the same identity you established with VMware Cloud services. To log in, select the tile and the system logs you into your service console.
You can discover additional Workspace ONE services under using the Available Services filter. You can select Learn More to explore these other services. Some of these services may also provide free trials that offer a hands-on experience. Use the free trials to validate your use cases. Contact VMware Sales or your partner if you are interested in any of these other services.
Find many helpful guides to get started with various Workspace ONE services on the Getting Started page. The information is divided into different sections to help you navigate admin functions. The sections help you best use the resources you have with Workspace ONE.
To access the Getting Started page, use your My Workspace page.
The page displays processes available to you depending on your Workspace ONE subscriptions.