Available through VMware Pathfinder and provisioned in the Workspace ONE Cloud, a Digital Workspace Proving Ground (DWPG) is a non-expiring, regionally located, fully integrated, enterprise-level digital workspace sandbox environment comprised of Workspace ONE Intelligence, Workspace ONE UEM with Workspace ONE Freestyle Orchestrator and Workspace ONE ONE Assist, Workspace ONE Access, Workspace ONE Hub Services, and last but not least, Next-Gen Horizon Cloud Service.
With enabling partners top of mind, the DWPG was developed so that a partner organization can build a single, all-powerful digital workspace demo & test environment where they have full admin access, just like they own it.
A DWPG is available to active partners and VMware employees.
Contents
Prerequisites
- Must be an active VMware partner organization (or VMware employee).
- A VMware ID (formerly known as a My VMware ID) is required. You must log in with your VMware ID.
- Email from "vmwservices.com" must be deliverable to your mailbox. Do not proceed until after verifying email from "vmwservices.com" is deliverable to your inbox.
DWPG Setup
DWPG Setup Time: ~ 5 minutes
DWPG setup is a one-time procedure that involves new (read: unfamiliar) interfaces and requires pertinent actions. Careful attention to each step will ensure DWPG setup success.
1. Go to the DWPG activity in VMware Pathfinder.
Using a private/incognito browser window, go to the DWPG activity in VMware Pathfinder. Click the "Get Started" button.
Review prerequisites.
2. Click LOG IN WITH MY VMWARE/CSP ID.
You must log in with your My VMware ID, now called VMware ID.
3. If needed, create your VMware ID to access VMware Cloud Services.
If you don't have a My VMware/CSP ID, create one using your company email address. Once logged in with your My VMware/CSP ID, you'll have access to Pathfinder's DWPG activity.
4. Go to the DWPG activity.
By using the link in step 1, once logged in with your My VMware/CSP ID, you'll be placed at the DWPG brokering activity. If not, search for "DWPG" in the Catalog.
Pathfinder's DWPG activity contains its own overview (1) and guide (2). Carefully follow this or that guide.
5. Request access.
On the upper right, click the REQUEST ACCESS button to initiate brokering by Pathfinder. Brokering will take a few moments.
If the request access button is not present and you only see login credentials, the organization member listed is your DWPG owner. Please use the provided email function to contact the DWPG owner or reach out to them directly for access.
You do not use Pathfinder to access a DWPG.
You may now exit the Pathfinder activity.
6. Read the Digital Workspace Proving Ground (DWPG) Disclaimer.
By proceeding with a DWPG request, you have read and accepted the DWPG Disclaimer.
| Digital Workspace Proving Ground Disclaimer |
|---|
|
Hosted in the Workspace ONE Cloud, a Digital Workspace Proving Ground (DWPG) is a non-expiring, enterprise-level digital workspace demo environment where you have full administrative access. By proceeding with a DWPG request, you attest your agreement to the following:
|
7. Use the "Get Started with Workspace ONE" email to log in to VMware Cloud Services (VCS).
CRITICAL
You will receive a "Get Started with Workspace ONE" email from Workspace ONE Cloud. To ensure a clean login process with your proper ID (free from cache, cookies, and potential other ID logged in another session), do the following:
- Right-click the email's tokenized "Get Started" link and copy the link.
- Launch a private/incognito browser window and go to the copied link address.
- Log in using the same My VMware/CSP ID that requested access.
Note for VMware Employees
This note is ONLY for VMware employees. When using the GET STARTED link, after a CSP login, if you are notified that,
You just logged in with a federated corporate account and do not have a VMware ID linked to it...
You must link your corporate account to your Vmware ID, as indicated in the notification.
8. Create a new VMware Cloud Services organization to contain your DWPG.
CRITICAL
DO NOT SELECT AN EXISTING ORGANIZATION.
If presented with a list of organizations, scroll to the bottom of the list and click "CREATE ORGANIZATION."
9. Name the DWPG organization.
The organization name is a friendly name that's used for identification purposes within VMware Cloud Services (VCS).
10. [Optional] Rename your Workspace ONE Access tenant's URL.
Rename it or leave it as is. Renaming may be desired as this URL is on the Workspace ONE User Portal.
11. Accept prompts and you're done.
Follow the prompts until you're in the Workspace ONE Cloud Admin Hub.
DWPG Fundamentals
Administration documentation: Getting Started with Workspace ONE Cloud Admin Hub
The VMware Cloud Services Console and the Workspace ONE Cloud Admin Hub are integrated to provide user administration and tenant access. The following are fundamental, need-to-know items after you've requested access and completed the DWPG's setup.
Intro to VMware Cloud Services (VCS)
DWPG tenant access is through VMware Cloud Services (VCS). During DWPG set up, you created a VCS organization to contain your DWPG (step 8). This VCS organization is the vehicle by which all Workspace ONE Cloud users and tenant access are managed.
The sub topics herein explain what a DWPG owner must know about VCS management of your Workspace ONE Cloud services (Click here VCS organization administration information).
Log In to DWPG Tenants
First, be certain you're accessing the DWPG organization and not some other VCS organization of your company. Once in your DWPG organization, you will see a "Workspace ONE" tile. Your DWPG tenants access is within this tile.
Each tenant has its own service tile that you must use to sign on to each service. Workspace ONE Cloud SSO authenticates your account into each tenant. You can not use your VCS account to log in to a service, say, Workspace ONE UEM, directly.
The below video shows you how to:
- Verify and change your DWPG organization in the VMware Cloud Services console
- From your VCS DWPG organization, drill into the Workspace ONE tile to the Workspave ONE Cloud Admin hub and DWPG tenants
- SSO into a couple DWPG tenants
Add a DWPG Owner
The VMware Cloud Services Console is where DWPG owners are managed. When brokered by Pathfinder, a DWPG receives a single organization owner in the environment. An owner is responsible for adding additional owners. Go to Cloud Services Console > Identity & Access Management to invite owners.
When adding an owner to your DWPG environment, you must assign the following:
- Organization Role: "Organization Owner"
- Service Role: "Workspace ONE" with role "admin"
The below video shows you how to:
- Access user administration in the VMware Cloud Services Console
- Add an environment owner
When an invited owner enters console.cloud.vmware.com for the first time, they must select the DWPG organization. Be sure to let them know to select the DWPG org.
Don't lose access to your DWPG! Add a shared administrator account as an owner of your DWPG organization.
Onboarding Next-Gen Horizon Cloud Service
A DWPG contains a tenant in Next-Gen Horizon Cloud Service. Legacy Horizon Cloud Service tenants are not supported in a DWPG.
Follow these steps to successfully onboard your Next-Gen Horizon Cloud Service tenant.
On first access of Horizon Cloud Service, you must choose Next-Gen Horizon Control Plane when prompted. This is a one-time configuration.
If you incorrectly chose "Horizon Control Plane" you will need to file a request with Horizon Cloud Service support to have it corrected.
Specific VCS organization roles are required to access the UI and APIs for the Horizon Universal Console. Use these instructions to assign these roles.
Once in your Horizon Cloud Service tenant, you must set up a pod. You'll not be able to do anything with Horizon Cloud Service until you set up a pod. DWPG does not include a pod. BYO pod. See the "Your new Horizon Cloud Service tenant environment and its portal" section in Horizon Cloud Deployments and Onboarding Pods — Horizon Pods on VMware SDDCs and Horizon Cloud Pods on Microsoft Azure
Support FAQ
Support for all DWPG services is provided by your pre-sales support resource. Otherwise, a DWPG is self-supported.
Refer to VMware Workspace ONE and Horizon Cloud Service product documentation.
Below you'll find answers and explanations to frequent DWPG questions.
Most likely, either the critical 'get started' email token wasn't cleanly used (step 7) or the new VCS org was not created (step 8).
Go back to step 7 and carefully proceed through.
Workspace ONE Assist is integrated with Workspace ONE UEM.
Just set up required device agents in UEM's application management, enroll and go.
Workspace ONE Cloud creates your admin account in the UEM service (and all services) by setting your email address as your username. If you have a pre-existing account in the UEM CN environment where your email address is your username, the pre-existing account will conflict causing Workspace ONE Cloud SSO failure.
Solution: In the CN environment, locate the pre-existing administrator account (the account with your username as your email address) and delete/replace the account.
Attention Partners: Reach out to your partner support contact if you're not able remove the conflicting account.
If a service has a renaming function, you can use its function to rename a tenant.
Please take care with the environment and its various services. Environment and tenant resets are not currently supported.