Skip to main content

September 2, 2026

Configuring Workspace ONE Unified Endpoint Management (UEM) Integration Settings

You can configure Workspace ONE Unified Endpoint Management (UEM) integration to enable centralized management of virtual desktops. To access UEM integration settings, in the Horizon Universal Console, select Settings and then click Manage in the Workspace ONE Unified Endpoint Management (UEM) Integration Settings tile.

Settings page described in text.

Configure UEM Environment Settings

UEM Environment settings define the enrollment configuration that will be used during image workflows.

  1. Select the UEM Environments tab.

  2. Click Add.

  3. Provide the required configuration details.

    Add UEM Environment Configuration.

  4. (Optional) If multiple UEM environments are configured, select Default to designate one as the default environment.

  5. Click Save.

    The configured UEM environments are available for selection during the image creation workflow.

Configure UEM OAuth Configuration Settings

OAuth configuration settings are required to authenticate and authorize communication with UEM.

Procedure

  1. Select the OAuth Configurations tab.

  2. Click Add.

  3. Provide the required configuration details.

    Add UEM OAuth Configuration.

  4. (Optional) If multiple OAuth configurations are configured, select Default to designate one as the default configuration.

  5. Click Save.

The configured OAuth settings are available for selection during the image creation workflow.

Note:

  • UEM environment and OAuth configurations are typically set up once.
  • The values entered here are reused during image creation when the Manage with UEM option is selected.
  • If multiple configurations exist, the default configuration is preselected in the image workflow.

IMS Integration Role — Required Permissions

Create a new IMS integration role in UEM with the following permissions.

CategoryPermission Level
API > REST > AppsRead
API > REST > Devices > REST API Devices WriteEdit
API > REST > Devices > REST API Devices ExecuteEdit
API > REST > Devices > REST API Devices ReadRead
API > REST > GroupsRead
API > REST > ProfilesRead
Apps & Books > Internal AppsRead
Apps & Books > Public Apps > Public Applications ViewRead
Apps & Books > Purchased Apps > Purchased Applications ViewRead
Device Management > Device Details > Device WipeEdit
Device Management > Device Details > WorkflowsRead
Device Management > Profiles > BaselinesRead
Device Management > Profiles > View > Profiles ViewRead
Device Management > Profiles > View > Profile Read OnlyRead
Device Management > ScriptsRead
Device Management > SensorsRead
FreestyleRead

Troubleshooting

Validate OAuth Token Configuration

If you encounter authentication issues, run the following cURL command with the correct values for TOKEN_URL, CLIENT_ID, and CLIENT_SECRET. A successful response will return an access_token.

curl --location '<TOKEN_URL>' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Authorization: Basic Og==' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'client_id=<CLIENT_ID>' \
--data-urlencode 'client_secret=<CLIENT_SECRET>'

Example: TOKEN_URL = https://na.uemauth.workspaceone.com/connect/token

Was this page helpful?

Provide feedback for this topic

Was this topic helpful?

Please do not include any personal or confidential information.

Generating link…