Validate and Activate Federation Setup and Link Omnissa Account

As the Enterprise Administrator setting up self-service federation, you are now ready to validate and activate the federation setup. Also, you must link your Omnisaa Account to the federated account.

Validate and activate

Important: Failing to sync groups and users can result in an error in the end-to-end authentication flow.

• Validate that you are logged in to the ACME Management Organization with the top-level primary domain acme.com.
• To validate domains or subdomains that are different from your account, you must send a validation link to an employee that has the appropriate account credentials, and ask them to test the setup.
• Verify that your browser settings allow pop-up windows.
• Ensure that all the users from the domain and subdomains are synchronized as part of Step 3: Sync groups and users.

Procedure

1. In the Complete Setup section of the Set up Enterprise Federation page in Cloud Services, click Start.
   The Validate login section of the workflow expands.
2. Click the Validate login button next to the acme.com domain.
   The Omnissa Cloud Services Welcome screen appears in a pop-up window.
3. Enter the email, username@domain, or UPN.
   • On the Omnissa Cloud Services Welcome screen, you identify yourself as a user with your email, username@domain, or UPN.
   • This is not the actual login. You authenticate and log in from the identity provider's page you configured as part of the self-service federation setup.
   • If the enterprise federation setup has been configured correctly, your browser redirects to your identity provider's login page.
4. In the identity provider's login page, enter your corporate credentials.
5. After logging in, close the pop-up window and return to the self-service federation workflow in Cloud Services.
   Upon successful login, the status of the acme.com domain in the Validate login section of the workflow changes to indicate that the domain has been validated.
6. Click Next to expand the Notify users about federation section of the workflow.
   1. Download the email template and modify if necessary for the needs of your communication to the users of the registered and verified domains in your Organization and any other Organizations that have users from these domains.
   2. Download the list of enterprise users whose accounts have been synced with Omnissa Cloud Services and must be notified about the change in their log in.
7. Click Next.
8. Review and acknowledge the list of changes that go into effect when federation is activated.
9. Click Enable.
   You are redirected to a status page that notifies you that enterprise federation has been activated.
10. Log out from Cloud Services and all other Omnissa Cloud Services.
11. Clear all browser cookies or open a new incognito browser.
12. Log in to Omnissa Cloud Services with your corporate credentials.

Results

If you can successfully log in to Omnissa Cloud Services with your corporate credentials, you have activated federation for all users with accounts ending with the acme.com domain that you federated in this scenario.

What to do next

Link your federated account to your Omnissa ID. This step is required for all existing users of Omnissa Cloud Services. Existing users of acme.com who previously used an Omnissa ID account to access their services won't be able to do so after federation is activated. Their access is restored only after they link the new federated account they used to log in to Omnissa Cloud Services to their existing Omnissa ID account.

Link Your Omnissa account

All existing users of Omnissa Cloud Services who used to access services with an Omnissa account, must link the account to their federated account

This step has to be completed when you first log in to Cloud Services Console with your federated account after the federation setup for your corporate domain has been completed. New users synced with your corporate domain post federation don't need to have an Omnissa ID unless they need to view billing information or file support tickets. In this case, they have to create an Omnissa account first, and then link their Omnissa ID to their federated account.

1. Log in to Omnissa Cloud Services Console with your federated account.
2. Click your user name on the Cloud Services Console menu.
3. Click My Account.
4. In the Omnissa ID Details of the My Account > Profile page, click Link a Omnissa ID.
5. Provide your Omnissa ID email and follow the prompts to complete the account linking.