More and more authentication methods are available to Workspace One Access and one of them is FIDO2. I’ve seen multiple use cases with the well-known Yubico Security Keys. But did you know you can also use Windows Hello as Security key? So, to put it in context, you can use Biometrics or PIN as identifier and login to Workspace One Access without sending credentials! Rock On! How does FIDO2 work? FIDO2 is like having a digital key that unlocks your online accounts instead o

A while ago I wrote a cross reference blog with my buddy Henry Heres about integrating Citrix Gateway and VMware Workspace One Access. A respected customer read these blogs and tried integrating this in their environment but ran in to issues and called for some assistance. Unfortunately, the original scenario we blogged about did not work in this specific environment, so I had to find an alternative way. In this blog I will show you another option and how to configure this!

As mentioned in my previous blog I was discussing a valid migration scenario between an existing Citrix Deployment to VMware Horizon with my buddy Henry Heres. One of the steps is to migrate the external portal from Citrix (Unified) Gateway to VMware WS One Access. This will be a divided in to two blogs describing the 2 steps. This blog is Step 2! In this step we will switch the portal to VMware WS One Access. Same as the previous one, I will show the flow, Henry will show t

A while ago I was discussing a valid migration scenario between an existing Citrix Deployment to VMware Horizon with my buddy Henry Heres. One of the steps is to migrate the external portal from Citrix (Unified) Gateway to VMware WS One Access. As seen before, discussing these kind of scenarios with Henry is like planting a seed and pouring a gallon of Pokon on top of it. So, we decided to do a Cross reference Blog. I will show the flow, the blog(s) made by Henry will show h

On a recent project a customer is moving it’s on-premises Exchange to Exchange Online. We decided VMware Access is the IDP for Microsoft 365. Well federated the Microsoft tenant with VMware Access and to get single sign on from the Horizon Instant Clones we are going to use the VMware Kerberos connector. So created and installed the necessary components configured the Conditional Access policies... and we have single sign on! Awesome! While explaining the flow to some people

Lately a lot has been written about the EOL of VMware Verify. But… what if you are already used to Imprivata and maybe have the Confirm ID for remote access licenses around? Can we use this instead? Yes you can! How? By connecting to Imprivata with RADIUS. Is this new? Nope… they even call this the legacy experience. But sometimes legacy is just what you might need so he ho, let’s go! Of course: As an alternative to this you can use the VMware Authenticator or Intelligent HU

A man browsed down the Login Page He says, "Why am I short of attention? Got a short little span of attention And, whoa, my logins are so long Where's my Credentials and TOTP? What if I die here? Who'll be my role model Now that my role model is gone, gone?" He ducked back down the alley With some roly-poly little login tool All along, along There were Username and passwords There were hints and allegations [Chorus] If you'll be my IDP I can be your long lost SP I can call yo

Awesome: VMware Verify (Intelligent HUB) is available within the Default Access Policy on al device platforms! Little back story: As stated in the following article: Workspace ONE Access: VMware Verify End-of-Life Migration Paths (88424) VMware Verify will reach end-of-support (EoS) and end-of-availability date (EoA) on October 31st, 2022. This gave us some headaches.. what are the alternatives? VMware Verify worked very well and gave us the basic features we requested… like