Configure Workspace ONE UEM Settings for Omnissa Identity Service

If you select Workspace ONE UEM as one of the services to integrate with your third-party identity provider through Omnissa Identity Service, you must configure certain settings in Workspace ONE UEM.

Configure Authentication Settings

1. In the Omnissa Connect console, click Launch on the UEM card.

2. In the Workspace ONE UEM console, navigate to All Settings > Devices & Users > General > Enrollment.

3. Update the settings in the Authentication tab.

   1. For Current Setting, select Override.

   2. For Authentication Mode(s), verify that Directory is selected.

   3. Click Save.

Enable the Password Grant setting (Password Grant Flows only)

If you use the Workspace ONE UEM username and password-based flows listed in Support for Certain Workspace ONE UEM Username and Password-based Flows, you must:

• Enable the Password Grant setting on the Workspace ONE UEM Directory Services page to grant permission to use the legacy Password Grant protocol.
• Select OpenID Connect as the authentication protocol in Omnissa Identity Service for the integration with your identity provider.
• (Okta integration) Create an OIDC app of type Native Application in Okta instead of Web Application and select the Resource Owner Password option for Grant type while creating the app.

When these requirements are met, the flows are supported for Omnissa Identity Service-provisioned users. Otherwise, the flows are supported for Basic users only.

Note: Password Grant flows are not supported when Google Workspace is configured as the identity provider because it does not support OIDC.

To enable the Password Grant setting:

1. In the Workspace ONE UEM console, navigate to All Settings > System > Enterprise Integration > Directory Services.

2. Select the Advanced tab.

3. Enable the Password Grant setting.

   

4. Click Save.

Manage Email Notifications for Users Provisioned to Workspace ONE UEM

You can configure whether end users receive an email notification when their accounts are provisioned in Workspace ONE UEM through Omnissa Identity Service. By default, a user activation email is sent upon provisioning. You can turn off email notifications or customize the email.

1. In the Workspace ONE UEM console, navigate to All Settings > System > Enterprise Integration > Directory Services.

2. Select the Advanced tab.

3. Expand the Notification section and make your selections.

   

4. Click Save.

See Workspace ONE UEM Directory Services Configuration for more information.