Configure Workspace ONE Access User Attributes for Integration with Horizon Cloud

If you are using Workspace ONE Access as your identity provider for Horizon Cloud, use the Workspace ONE Access console to configure the mandatory user attributes.

The purpose of this procedure is to add additional Workspace ONE Access attributes that are mandatory to successfully configure Workspace ONE Access as the identity provider for Horizon Cloud, and to map those required attributes to your Active Directory attributes.

The userPrincipalName, objectGuid, sid, and netBios Workspace ONE Access attributes are mandatory and must be mapped to the appropriate Active Directory attributes as described in the following steps.

Prerequisites

Before you can configure user attributes in the Workspace ONE Access console, you must install the Workspace ONE Access connector and set up directory integration with Active Directory.

Procedure

1. Log in to the Workspace ONE Access console.

2. Click Settings > User Attributes

3. Add the following custom attributes as illustrated in the following list and click Save.

   Note: Make sure that you enter the case-sensitive attributes exactly as they appear in this list.

   • objectGuid
   • sid
   • netBios

   Even though userPrincipalName is also mandatory for this integration, because it already appears in the list of default attributes, you do not have to add it.

4. Click Integrations > Directories to map the Workspace ONE Access attributes to your Active Directory attributes.

   1. Using the Manage part of the Workspace ONE Access console's Identity & Access Management area, navigate to the screen where directories are configured and click the name of the directory that contains the users and groups that have Horizon Cloud entitlements.

   2. In the screen for that directory, click the Sync Settings tab, then navigate to its Mapped Attributes page.

   3. Map the Workspace ONE Access user attributes to the Active Directory attributes as indicated.

      Workspace ONE Access Attribute	Active Directory Attribute
      userPrincipalName	userPrincipalName
      objectGuid	objectGUID
      sid	objectSid
      netBios	msDS-PrincipalName

5. Click Save.

6. Verify that you selected all the users and groups that sync to your Horizon Cloud environment.

   In the Workspace ONE Access console, you can view and edit the lists of users and groups by navigating from the directory's Sync Settings screen into the Users tab and Groups tab.

7. In the Workspace ONE Access console, return to that directory's page and click Sync to sync users and groups to Workspace ONE Access, now using all of the correct user attributes.