Integrating AD FS as a Federated Identity Provider for Omnissa Access

With AD FS integrated as a trusted identity provider, end users can log in to the Hub portal with their Active Directory credentials. To complete the integration, configure AD FS as an identity provider for Omnissa Access, and Omnissa Access as a relying party for AD FS.

Integrating AD FS as a federated identity provider for Omnissa Access allows you to implement Workspace ONE Intelligent Hub Login Using AD FS (MainUseCases.md)). This use case employs the following authentication flow.

1. End user seeks access to the Hub portal.
2. As the identity component of the Workspace ONE platform, Omnissa Access redirects the authentication request to AD FS.
3. If needed, AD FS prompts the user to log in with Active Directory credentials.
4. AD FS authenticates the user, and issues a security token containing the LDAP email address attribute of the user.
5. Omnissa Access accepts the SAML-formatted token from AD FS as the trusted identity provider.
6. Omnissa Access grants the user access to the Hub portal.

AD FS Identity Provider Flow