Identity and Access Management in a Horizon Cloud Environment

This documentation page provides a brief introduction to the use of identity and access management in a Horizon Cloud environment and lists links to pages with more detailed information.

Understanding User Identity and Machine Identity

Horizon Cloud makes a distinction between user identity and machine identity, and it relies on both types of identity when establishing a secure connection between a client and a remote desktop or application.

In Horizon Cloud, you must set up an identity configuration consisting of an identity provider to authenticate the user identity and an identity provider to authenticate the machine identity.

• User identity

  Horizon Cloud requires you to register a user identity provider. The service uses this identity provider to authenticate client users attempting to access remote desktops and applications.

• Machine identity

  Horizon Cloud also requires you to register a machine identity provider. The service uses this identity provider to establish the machine identity of virtual machines that provide remote desktops and applications.

  Through the machine identity provider, the service joins remote desktops and the virtual machine sources for remote applications to the trusted network domain that client users are entitled to access.

Requirements for User Identity and Machine Identity

For detailed information about the identity configurations supported by Horizon Cloud and the detailed requirements for user identity and machine identity, see Requirements Checklist for Deploying a Microsoft Azure Edge.

Administrators and Role-Based Access Control (RBAC)

For administrator access to your environment, the service provides role-based access control using the features of Omnissa Cloud Services. These controls ensure that only authorized personnel have the appropriate levels of access. The controls are based on the principle of least privilege. For more information, see the About Adding More Users and Assigning Roles section at Onboarding for Horizon Cloud for Administrators.