Enabling Omnissa Access URL Endpoint in Omnissa Access Appliance (On premise only)

When you use the Getting Started Wizard in the Workspace ONE UEM console to integrate an on-premises deployment of Omnissa Access version 23.09 with Workspace ONE UEM, you must activate the API login URL endpoint before you can start the integration. The login URL endpoint /SAAS/API/1.0/REST/auth/system/login hosted by the Omnissa Access appliance is deactivated by default.

To learn more about this Omnissa Access security setting, see Omnissa Access Security Settings Guidelines.

Enable/SAAS/API/1.0/REST/auth/system/login

Enable /SAAS/API/1.0/REST/auth/system/login so that system domain admin users can log into the Omnissa Access console.

Procedure

1. SSH into the Omnissa Access appliance as the root user.

2. To enable the login to the service node, enter

   $cd /usr/local/horizon/bin
   $hznAdminTool configureBreakGlassLogin -systemLogin -enable
   

3. Restart the service on the appliance. Enter service horizon-workspace restart.

   Repeat this process for all appliances in your environment.

When /SAAS/API/1.0/REST/auth/system/login is enabled, the admin can use the Getting Started Wizard in the UEM console to integrate the Workspace ONE UEM and Omnissa Access services.

Deactivate /SAAS/API/1.0/REST/auth/system/login

After you configure the integration between Workspace ONE UEM with Omnissa Access, deactivate /SAAS/API/1.0/REST/auth/system/login as a login option.

Procedure

1. SSH into the Omnissa Access appliance as the root user.

2. To deactivate the login, enter

   $cd /usr/local/horizon/bin
   $hznAdminTool configureBreakGlassLogin -systemLogin -disable
   

3. Restart the service on the appliance. Enter service horizon-workspace restart

   Repeat this process for all appliances in your environment.