After users use True SSO to login to the desktop, they can unlock the desktop after reauthentication from the Workspace ONE portal using the same logon credentials.
Prerequisites
- Verify that you have Omnissa Horizon version 7.8 or later.
- Verify that you have Omnissa Horizon Client for Windows version 5.0 or later.
- Verify that you have Workspace ONE version 19.03 or later.
Procedure
-
Enable Workspace ONE and configure it for use with Omnissa Horizon Connection Server.
-
Configure Horizon Connection Server for True SSO.
-
To start virtual or published desktops, connect to a Horizon Connection Server in Workspace ONE mode that has True SSO configured.
-
Start virtual or published desktops from the Workspace ONE portal so that the user can use single sign on with True SSO.
-
Lock the desktop.
-
To unlock the desktop, select True SSO User and click Submit.
You are redirected to the browser to re-authenticate with Workspace ONE.
-
Enter the credentials and passcode of the locked desktop.
What to do next
You can disable this feature by setting a registry key on the machine where Horizon Agent is installed, in the following location:
HKLM\Software\VDM\Agent\CertSSO[DisableCertSSOUnlock=true]
You can also disable this feature by setting the registry key DisabledFeatures=TrueSSOUnlock on Horizon Client for Windows in the following locations:
- On a Windows 32-bit operating system:
[HKEY_CURRENT_USER\Software\VDM\Client] or [HKEY_LOCAL_MACHINE\Software\VDM\Client]. - On a Windows, 64-bit operating system:
[HKEY_CURRENT_USER\Software\VDM\Client] or [HKEY_LOCAL_MACHINE\Software\VDM\Client].
If the registry key is set, the True SSO User option does not appear when the user unlocks the desktop.
Was this page helpful?