Syncing Workspace ONE UEM Users to Omnissa Access Directories

When Omnissa Access and Workspace ONE UEM services are integrated, UEM user accounts are synchronized from the UEM console to the Omnissa Access console to enable Workspace ONE UEM users single sign-on access to the Workspace ONE Intelligent Hub app and their app resources without requiring reauthentication.

In the Workspace ONE UEM console, you can set up either Directory-based account access to user accounts, or you can create local basic user accounts that are not integrated to your UEM directory service. When you integrate with the Omnissa Access service, you select which type of user accounts to sync to the Omnissa Access service.

Important: Make sure that the users and groups synced by the Workspace ONE UEM service to the Omnissa Access directory are unique. You should not sync the same user and groups via a Omnissa Access specific directory from the same source directory server (Active Directory or OpenLDAP). This is because the users/groups could share the same externalId. If duplicate user and groups are synced, it might cause directory sync to fail in the Omnissa Access Connector Directory Sync Service.

You can also use third-party identity providers such as Okta and Ping to provide single sign-on authentication to the Workspace ONE Intelligent Hub app. See Providing Access to Third-Party Managed Applications in Omnissa Access.