Although with many implementations of the Workspace One platform Workspace One Access is configured as the IDP (personally preferred when using this platform) I also encounter customers where EntraID is the preferred IDP with mostly valid reasons. There are use cases this is the better choice. With the flexibility Workspace One Access offers this is no issue at all. But when shifting the IDP to EntraID I usually advice to also shift the Conditional Access policies to EntraID.

Found this script i created when building the lab in my archives... perhaps it will help someone. Enjoy! # Edwin de Bruin # www.debruinonline.net $CServer=”MS-SUB-CA-01” #Enter your CA Server $templatename=”Horizon_CS” #template used for your horizon server $Domain=Get-WMIObject Win32_ComputerSystem| Select-Object -ExpandProperty Domain $Domain="$Domain".ToLower() $FQDN=$env:COMPUTERNAME+'.'+$domain $fqdn=([System.Net.Dns]::GetHostByName(($env:computerName))).Hostname $subjec