This is the essential, getting started with a DWPG guide. Keep reading to learn what a DWPG is, how to set it up, and must-know administration information.
In This Guide
DWPG Overview
Available through VMware Pathfinder and provisioned in the Workspace ONE Cloud, a Digital Workspace Proving Ground (DWPG) is a regionally located, fully integrated, non-expiring, enterprise-level digital workspace sandbox environment.
With enabling our partners top of mind, the DWPG was developed to provide partners a production-level, digital workspace sandbox environment for demos and testing.
A DWPG is a complete Workspace ONE Cloud environment that contains the following services (links to docs.vmware.com):
- Workspace ONE Intelligence
-
Workspace ONE UEM
Workspace ONE Assist
Workspace ONE Freestyle Orchestrator - Workspace ONE Access
- Workspace ONE Hub Services
- Horizon Cloud Service - next-gen
- VMware Identity Services
A DWPG is available to active VMware partners and VMware employees.
DWPG Prerequisites
- Must be an active VMware partner organization (or VMware employee).
- A VMware ID — You must log in with your organizational VMware ID.
- Email from "vmwservices.com" must be deliverable to your mailbox.
Do not proceed until verifying email from "vmwservices.com" is permitted to your inbox.
DWPG Setup
Time to complete: 5 minutes
Initiated by VMware Pathfinder, DWPG setup is a one-time procedure that requires you to (1) request the DWPG and then (2) create a new, dedicated VMware Cloud Services organization to contain the DWPG.
This process will be new to you.
With great care, proceed step-by-step. Do not skip or presume steps.
1. Go to the DWPG activity in VMware Pathfinder.
Using a private/incognito browser window, go to the DWPG activity in VMware Pathfinder. Click the "Get Started" button.
Review prerequisites.
2. Click LOG IN WITH VMWARE ID.
You must log in using your VMware ID.
3. Enter your VMware ID credentials.
Your organizational VMware ID is required to access VMware Cloud Services.
If you don't have a VMware ID, create your VMware account.
4. Go to the DWPG activity.
By using the DWPG activity link in step 1, once logged in with your VMware ID—and successfully validated as an active VMware partner or VMware employee—you'll be placed at the DWPG activity. If not, search for "DWPG" in the Catalog.
Pathfinder's DWPG activity contains its own overview (1) and guide (2). Carefully follow this or that guide.
5. Request access.
On the upper right, click the REQUEST ACCESS button to initiate brokering by Pathfinder. Brokering will take a few moments.
Wait for the hyper-critical 'get started' email.
If the request access button is not present and you only see "login credentials," the organization member listed is your DWPG owner. Please use the provided email function to contact the DWPG owner or reach out to them directly for access.
You do not use Pathfinder to access a DWPG. You may now exit the Pathfinder activity.
By proceeding with a DWPG request, you have accepted the Digital Workspace Proving Ground Disclaimer.
| Digital Workspace Proving Ground (DWPG) Disclaimer |
|---|
|
Hosted in the Workspace ONE Cloud, a Digital Workspace Proving Ground (DWPG) is a non-expiring, enterprise-level digital workspace demo environment where you have full administrative access. By proceeding with a DWPG request, you attest your agreement to the following:
|
6. Use the "Get Started with Workspace ONE" email to log in to VMware Cloud Services (VCS).
CRITICAL
After requesting access, and subsequent successful provisioning, you will receive a "Get Started with Workspace ONE" email from Workspace ONE Cloud.
With the same VMware ID, log in to VMware Cloud Services (VCS) using the email's 'Get Started' link.
To ensure your requesting VMware ID is logging in, you can do the following:
- Right-click the "Get Started" button and copy the tokenized link.
- Launch a private/incognito browser window and go to the copied address.
- Log in using the same VMware ID used to request access.
Note for VMware Employees
This note is ONLY for VMware employees. When using the GET STARTED link, after a CSP login, if you are notified that,
You just logged in with a federated corporate account and do not have a VMware ID linked to it...
You must link your corporate account to your Vmware ID, as indicated in the notification.
7. Create a new VMware Cloud Services organization to contain your DWPG.
CRITICAL
The step may be in two parts. If you are first presented with a screen stating you have the Workspace ONE service associated with your account, go to the bottom of that screen and click ADD SERVICE TO ANOTHER ORG.
Then on the next screen, click CREATE ORGANIZATION.
If presented with a list of organizations, do NOT select an existing organization.
8. Name the DWPG organization.
The Organization Name is a friendly name used for identification purposes within VMware Cloud Services (VCS) console.
9. [Optional] Rename your Workspace ONE Access tenant's URL.
Rename it or leave it as is. Renaming may be desired as this URL is on the Workspace ONE User Portal.
10. Accept prompts to complete the setup.
Follow the prompts until you're in the Workspace ONE Cloud Admin Hub. You're in!
Key Administration
Administration documentation: Getting Started with Workspace ONE Cloud Admin Hub
The VMware Cloud Services Console and the Workspace ONE Cloud Admin Hub are integrated to provide user administration and tenant access. The following are fundamental, need-to-know administration items after you've completed the DWPG's setup.
During DWPG set up, you created a VCS organization that contains your DWPG (step 8). This container is used to manage all Workspace ONE Cloud users and access roles via RBAC.
The following topics explain what a DWPG owner must know about VCS organization management. Click here for VCS organization administration documentation.
Log In to DWPG Tenants
First, be certain you're accessing your DWPG organization and not some other VCS organization of your company. Once in your DWPG organization, you will see a "Workspace ONE" tile. Click into this tile to enter the Workspace ONE Cloud Admin Hub. From within you'll access your tenants.
Each service has a tile that must be used for signing in. Workspace ONE Cloud SSO authenticates your VMware ID into each tenant. In other words, you can't browse to your UEM URL and log in to UEM directly using your VMware ID.
The below video shows you how to:
- Select your DWPG organization in the VMware Cloud Services console
- From your VCS DWPG organization, drill into the Workspace ONE tile to the Workspace ONE Cloud Admin hub and DWPG tenants
- SSO into a couple tenants
Add a DWPG Owner
Don't lose access to your DWPG! If the owner of a DWPG leaves your company and they are the only owner, you will lose access to the DWPG. Be sure to maintain an active administrator account (a shared admin account) in your VCS DWPG organization.
Per VMware Cloud Services operations support policy, for VMware support to add an owner to a VCS organization, a vice president or higher at your organization must submit approval.
The VMware Cloud Services Console is where DWPG owners are managed. When brokered by Pathfinder, a DWPG receives a single organization owner in the environment. An owner is responsible for adding additional owners. Go to Cloud Services Console > Identity & Access Management to invite owners.
When adding an owner to your DWPG environment, you must assign the following:
- Organization Role: "Organization Owner"
- Service Role: "Workspace ONE" with role "admin"
The video shows you how to:
- Access user administration in the VMware Cloud Services Console
- Add an environment owner
When an invited owner enters console.cloud.vmware.com for the first time, they must select the DWPG organization. Be sure to let them know to select the DWPG org.
Onboarding Horizon Cloud Service - next-gen
A DWPG is provisioned with a Horizon Cloud Serve (HCS) next-gen tenant. On first access to HCS, be sure to follow and review each step to successfully onboard your tenant.
The first time you click the Horizon Cloud Service tile, you will be prompted to select the control plane for your provisioned Horizon Cloud Service environment. You must select Next-Gen Horizon Control Plane. This is a one-time configuration.
If the bottom choice "Horizon Control Plane" is accidentally selected, you will need to file a Horizon Cloud Service support request to have it corrected.
Specific VCS organization roles are required to access the UI and APIs for the Horizon Universal Console. Use these instructions to assign these roles.
Once in your Horizon Cloud Service tenant, you must set up a pod. You'll not be able to do anything with Horizon Cloud Service until you set up a pod. DWPG does not include a pod. BYO pod. See the "Your new Horizon Cloud Service tenant environment and its portal" section in Horizon Cloud Deployments and Onboarding Pods — Horizon Pods on VMware SDDCs and Horizon Cloud Pods on Microsoft Azure
DWPG FAQ
Support for all DWPG services is provided by your pre-sales support resource. Otherwise, a DWPG is self-supported.
Refer to VMware Workspace ONE and Horizon Cloud Service product documentation.
Below you'll find answers and explanations to frequent DWPG questions.
Most likely, either the critical 'get started' email token wasn't cleanly used (step 6) or the new VCS org was not created (step 7).
Go back to step 6 and carefully proceed through.
Workspace ONE Assist is integrated with Workspace ONE UEM.
Just set up required device agents in UEM's application management, enroll and go.
Workspace ONE Cloud creates your admin account in the UEM tenant by setting your email address as your username. If you have a pre-existing account in the UEM environment where your email address equals username, the pre-existing account will conflict causing Workspace ONE Cloud SSO failure.
In the UEM CN environment, remove/replace the account where your email address equals a username.
If you need assistance removing the conflicting account, reach out to your pre-sales support contact. Pathfinder support can't access CN environments.
If a service has a renaming function, you can use its function to rename a tenant.
Please take care with the environment and its various services. Environment and tenant resets are not currently supported.