As an Enterprise Administrator for your federated domains, you modify the initial federation setup through the Enterprise Federation dashboard in Omnissa Connect.
Who can modify setup?
- Enterprise Administrators can modify the federation setup.
- Owners who hold system administrator roles with their enterprise and have sufficient knowledge of the enterprise directory service can also modify the federation setup.
How to access
To access the Enterprise Federation dashboard, you must log in to the Management Organization in Omnissa Connect with your federated account.
Note: When logging in to the Enterprise Federation dashboard, use a regular browser mode. Some of the features may not work properly in incognito mode.
Available changes to federation setup
The Enterprise Federation dashboard provides an overview of the current federation setup for your enterprise. The current setup includes the listed data.
- The enterprise directories configured for users and groups sync.
- The number of synced users and groups.
- The identity provider and corporate domains configured for federation.
- The user identification method.
As an Enterprise Administrator, you can make the following changes to the federation configuration setup.
- Add more domains or sub-domains.
- Sync more groups and users.
- Make changes to your directory settings, such as change sync frequency.
- Modify the display name of the identity provider.
- Regenerate the identity provider token for SCIM provisioning.
- Grant other Enterprise Administrators access to the Enterprise Federation dashboard in the Management Organization.
- Activate member organizations for Identity Governance and Administration (IGA).
Caution: All users with the Enterprise Administrator role can make changes to the federation configuration. These changes are domain wide and impact all admins (users) or groups across any Omnissa Connect organization with users from federated domains. For example, if an Enterprise Administrator removes a group that was previously synced, any organization using the group is impacted.
Can I make changes to the identity provider configuration?
No, after your federation setup is activated, you are no longer able to make changes to the identity provider configuration. You cannot change your identity provider to a different one or modify the authentication method configured for your identity provider. The Enterprise Federation dashboard only lets you change the display name of your already configured identity provider.
To make changes to the identity provider settings in your enterprise federation setup, you must file a support ticket.
Make changes to synced groups and users
You can sync more users and groups from your enterprise to use their federated accounts for access to Omnissa Connect.
From the Enterprise Federation dashboard in your Management Organization, you can:
- View users and groups that are synced with your corporate Active Directory to troubleshoot problems with federated accounts.
- Sync additional users and groups to access Omnissa Connect with their federated accounts.
Prerequisites
To make changes to the initial federation setup, you must be logged in to the Management Organization for your enterprise as an Enterprise Administrator.
Procedures
- In the Omnissa Connect console, select Identity Management > Enterprise Federation.
The Enterprise Federation dashboard displays. - Do one of the following:
| To | Do this: |
|---|---|
| View users and groups. | 1. In the Synced Users and Groups section of the Enterprise Federation dashboard, select the users or groups tile. The list of synced users or groups display. 2. View, search, or filter the list entries. |
| Sync more users from your Active Directory with the Omnissa Access connector. | 1. In the Directories section of the Enterprise Federation dashboard, select the directory for which you want to sync more users. 2. In the Sync settings > Users and Groups > Users section, select Edit. 3. Select Add. 4. Enter the user DN pattern. 5. Select Save. 6. Select Sync Now for the directory. The number of total users is refreshed. |
| Sync more groups from your Active Directory with the Omnissa Access connector. | 1. In the Directories section of the Enterprise Federation dashboard, select the directory for which you want to sync more groups. 2. In the Sync settings > Users and Groups > Groups section, select Edit. 3. To add more groups to an existing Group DN, select the Edit icon, select additional groups from the list that appears, then select Save. 4. To add more groups from a new Group DN, select Add. 5. Enter the group DN pattern. 6. Select the Select Groups link that appears next to the new entry. 7. In the groups list that opens, select the groups you want to sync. 8. Select Save. 9. In the Directory section of the page, select Sync Now. The number of total users and groups is refreshed. |
Make changes to your directory settings
You can modify your initial Active Directory setup or add a new directory to sync groups and users.
From the Enterprise Federation dashboard in your Management Organization, you can:
- Ensure groups and users from your Active Directory are synced regularly for federation with Omnissa Connect by configuring the desired sync frequency.
- Reduce error risks during directory syncs by setting safeguards that limit the number of changes that can be made to users and groups. By default, there are no pre-set safeguards to your federation setup.
- Modify the mapping of the attributes from your directory services to the attributes that are configured to sync with the hosted Omnissa Access tenant.
- Add multiple directories for group and user sync with your federated domains.
Prerequisites
To make changes to the initial federation setup, you must be logged in to the Management Organization for your enterprise as an Enterprise Administrator.
Procedures
- In the Omnissa Connect console, select Identity Management > Enterprise Federation.
The Enterprise Federation dashboard displays. - Do one of the following:
| To | Do this: |
|---|---|
| Add a new directory. | 1. In the Directories section of the Enterprise Federation dashboard, select Add Directory. 2. Follow the prompts in the Add a Directory workflow that opens. The steps for adding a new directory to your enterprise setup are the same as those you followed in the initial setup. After completing the workflow, the synced new directory appears in the Directories section of the dashboard. |
| Change the sync frequency of a directory. | 1. In the Directories section of the Enterprise Federation dashboard, select the tile of the directory for which you want to change the sync frequency. 2. In the Sync settings section, select the Sync frequency tab. 3. Select Edit. 4. Select a menu item from the Sync frequency drop-down menu. 5. If applicable, select Day and Time. 6. Select Save |
| Add or change sync safeguards of a directory. | 1. In the Directories section of the Enterprise Federation dashboard, select the tile of the directory for which you want to add safeguards. 2. In the Sync settings section, select the Safeguards tab. 3. Select Edit. 4. Using the drop-down menus, set the preferred sync failure limits. Each line of drop-down menus corresponds to one safeguard setting. 5. To create additional safeguards, select Add. 6. When ready, select Save. The safeguards you defined are displayed as a list of entries in the Safeguards tab for the directory. You edit or delete safeguards by selecting Edit. |
| Adjust the mapped attributes of a directory. | 1. In the Directories section of the Enterprise Federation dashboard, select the tile of the directory for which you want to modify attributes mapping. 2. In the Sync settings section, select the Mapped Attributes tab. You see two lists of attribute names. The attributes listed in the Attribute name column are mapped to the attributes in your active directory displayed in the Attribute name in Active Directory column. 3. To modify the mapping for an attribute, select Edit. 4. Use the drop-down menu arrow in the right column to select a different attribute mapping from your active directory. Note: You can't change userName attribute mapping.5. Select Save. |
Add new domains for enterprise federation
You can add new domains or subdomains to your initial enterprise federation setup from the Enterprise Federation dashboard.
Restriction
There is one restriction that applies to adding domains to a direct federation setup. If you are using Username@Domain as the identification preference for user logins, you are not allowed to add more domains or subdomains to the existing federation setup.
Each domain or subdomain that you add to your existing enterprise federation setup must pass verification of the domain's ownership and verification of user login using your corporate identity provider.
Important: After you add a domain or subdomain to the federation setup, it can no longer be modified or removed. If you have to make a change, you must file a support ticket.
Prerequisites
To make changes to the initial federation setup, you must be logged in to the Management Organization for your enterprise as an Enterprise Administrator.
Procedure
- In the Omnissa Connect console, select Identity Management > Enterprise Federation.
- In the Domains section of the Enterprise Federation dashboard, select Add domains or Add subdomains.
- Complete the steps in the workflow that opens.
The steps for adding a domain or subdomain to your current federation setup are identical to the steps you followed for the initial federation setup.
Regenerate a SCIM provisioning token
You can regenerate your SCIM provisioning token from the Enterprise Federation dashboard.
Prerequisites
To make changes to the federation setup, you must be logged in to the Management Organization for your enterprise as an Enterprise Administrator.
Procedure
- In the Omnissa Connect console, select Identity Management > Enterprise Federation.
- In the Identity Providers section of the Enterprise Federation dashboard, select the identity provider that needs a regenerated token.
- In the identity providers page, go to the Tenant url and secret token section and select Edit.
- For the Secret Token menu option, select Regenerate.
- Confirm your selection by selecting Regenerate again.
- Use the copy icon to retrieve the regenerated secret token so that you can add it to the identity provider.
- Go to your identity provider and navigate to the provisioning app that provisions users and groups to Omnissa.
- Paste the secret token into the credentials section of the provisioning app.
Was this page helpful?