You can configure a third-party identity provider to manage user identity and authentication for single sign-on to Workspace ONE. This is useful when your organization already has an established identity provider and you want Omnissa Access to federate authentication to it.
Omnissa Access supports identity providers that are compatible with the SAML 2.0 and OpenID Connect 1.0 protocols.
- SAML: Security Assertion Markup Language (SAML) is a protocol that transfers a user's identity between the identity provider and the service provider in XML documents called SAML assertions. SAML 2.0 offers single sign-on support and federated authentication.
- OpenID Connect: OpenID Connect (OIDC) is an authentication protocol based on OAuth2. The OpenID Connect protocol enables clients to verify the identity of users based on the authentication performed by an authorization server. The basic profile information about the user identity is then encoded in a JSON Web Token (JWT).
Both protocol types support Just-in-Time (JIT) user provisioning, which creates and updates user accounts in Omnissa Access dynamically as users sign in, based on the assertions or claims the third-party identity provider sends.
Choose the protocol that matches what your third-party identity provider supports, and follow the corresponding procedure:
Was this page helpful?