Access policies in the Workspace ONE environment establish trust between users, devices, and applications. Access policies consist of rules that specify criteria users must meet to sign in to their apps portal and access resources. You can configure features such as mobile single sign-on, conditional access to applications based on enrollment, compliance status, multi-factor authentication, and step-up authentication.
Policy rules map the requesting IP address to network ranges and designate the appropriate authentication method for different type of devices. Rules also define the authentication methods and the number of hours the authentication is valid. You can apply these rules to specific groups or to all users.
The Omnissa Access service includes a default access policy set that contains basic access policy rules that control overall access. The basic access policy rules are initially set up to allow all users access from all network ranges through a web browser or the Workspace ONE Intelligent Hub app. You can customize the default policy set to create more specific rules for different devices and authentication methods.
You can create custom conditional access policies with specific rules to control who can access your Web and Virtual apps. The rules can be based on the device type, network range, and authentication methods, including multi-factor authentication. After the access policy is created, you select Web and Virtual apps to associate with the policy. When users try to access an app that is restricted, they are asked to authenticate according to the policy rules before they can access the app.
You can also create the following types of access policy rules.
-
Deny access by network range and device type.
-
Require device enrollment through the Workspace ONE Intelligent Hub app to enroll users’ iOS and Android devices into Workspace ONE UEM.
Was this page helpful?