This is the essential, getting started with a DWPG guide. Keep reading to learn what a DWPG is, how to set it up, and must-know administration information.
In This Guide
DWPG Overview
Available through VMware Pathfinder and provisioned in the Workspace ONE Cloud, a Digital Workspace Proving Ground (DWPG) is a regionally located, fully integrated, non-expiring, enterprise-level digital workspace sandbox environment.
With enabling our partners top of mind, the DWPG was developed to provide partners a production-level, digital workspace sandbox environment for demos and testing.
A DWPG is a complete Workspace ONE Cloud environment that contains the following services (links to docs.vmware.com):
- Workspace ONE Intelligence
-
Workspace ONE UEM
- Workspace ONE Assist
- Workspace ONE Freestyle Orchestrator
- Workspace ONE Access
- Workspace ONE Hub Services
- Horizon Cloud Service - next-gen
- VMware Identity Services
A DWPG is available to active VMware partners and VMware employees.
High-level DWPG drawing:
DWPG Prerequisites
- Must be an active VMware partner organization (or VMware employee).
- A VMware ID — You must log in with your organizational VMware ID.
- Email from "vmwservices.com" must be deliverable to your mailbox.
Do not proceed until verifying email from "vmwservices.com" is permitted to your inbox.
DWPG Setup
Time to complete: 5 minutes
Initiated by VMware Pathfinder, DWPG setup is a one-time procedure that requires you to request the DWPG and then create a dedicated VMware Cloud Services organization which will contain the DWPG.
To ensure successful DWPG setup, carefully read and follow each step in this section.
1. Go to the DWPG activity in VMware Pathfinder.
Using a private/incognito browser window, go to the DWPG activity in VMware Pathfinder. Click the "Get Started" button.
Review prerequisites.
2. Click LOG IN WITH VMWARE ID.
You must log in using your VMware ID.
3. If you do not have a VMware ID, create it. The VMware ID is required to access VMware Cloud Services.
If you don't have a VMware ID, create it using your company email address. A VMware ID is required to access VMware Cloud Services.
4. Go to the DWPG activity.
By using the link in step 1, once logged in with your VMware ID, you'll be placed at the DWPG brokering activity. If not, search for "DWPG" in the Catalog.
Pathfinder's DWPG activity contains its own overview (1) and guide (2). Carefully follow this or that guide.
5. Request access.
On the upper right, click the REQUEST ACCESS button to initiate brokering by Pathfinder. Brokering will take a few moments. Wait for the 'get started' email.
If the request access button is not present and you only see login credentials, the organization member listed is your DWPG owner. Please use the provided email function to contact the DWPG owner or reach out to them directly for access.
You do not use Pathfinder to access a DWPG.
You may now exit the Pathfinder activity.
By proceeding with a DWPG request, you have accepted the Digital Workspace Proving Ground Disclaimer.
| Digital Workspace Proving Ground (DWPG) Disclaimer |
|---|
|
Hosted in the Workspace ONE Cloud, a Digital Workspace Proving Ground (DWPG) is a non-expiring, enterprise-level digital workspace demo environment where you have full administrative access. By proceeding with a DWPG request, you attest your agreement to the following:
|
6. Use the "Get Started with Workspace ONE" email to log in to VMware Cloud Services (VCS).
CRITICAL
After Pathfinder brokers the environment, you will receive a "Get Started with Workspace ONE" email from Workspace ONE Cloud.
Using the same VMware ID, log in to VMware Cloud Services (VCS) using the email's 'Get Started' link.
To ensure a clean login process with your requesting VMware ID—free from any cache or cookies of another ID—do the following:
- Right-click the "Get Started" button and copy the tokenized link.
- Launch a private/incognito browser window and go to the copied address.
- Log in using the same VMware ID used to request access.
Note for VMware Employees
This note is ONLY for VMware employees. When using the GET STARTED link, after a CSP login, if you are notified that,
You just logged in with a federated corporate account and do not have a VMware ID linked to it...
You must link your corporate account to your Vmware ID, as indicated in the notification.
7. Create a new VMware Cloud Services organization to contain your DWPG.
CRITICAL
The step may be in two parts. If you are first presented with a screen stating you have the Workspace ONE service associated with your account, go to the bottom of that screen and click ADD SERVICE TO ANOTHER ORG.
Then on the next screen, click CREATE ORGANIZATION.
If presented with a list of organizations, do NOT select an existing organization.
8. Name the DWPG organization.
The Organization Name is a friendly name used for identification purposes within VMware Cloud Services (VCS) console.
9. [Optional] Rename your Workspace ONE Access tenant's URL.
Rename it or leave it as is. Renaming may be desired as this URL is on the Workspace ONE User Portal.
10. Accept prompts to complete the setup.
Follow the prompts until you're in the Workspace ONE Cloud Admin Hub. You're in!
Essential Administration
Administration documentation: Getting Started with Workspace ONE Cloud Admin Hub
The VMware Cloud Services Console and the Workspace ONE Cloud Admin Hub are integrated to provide user administration and tenant access. The following are fundamental, need-to-know administration items after you've completed the DWPG's setup.
During DWPG set up, you created a VCS organization that contains your DWPG (step 8). This container is used to manage all Workspace ONE Cloud users and access roles via RBAC.
The following topics explain what a DWPG owner must know about VCS organization management. Click here for VCS organization administration documentation.
Log In to DWPG Tenants
You can not use your VMware ID to directly log in to a tenant.
First, be certain you're accessing the DWPG organization and not some other VCS organization of your company. Once in your DWPG organization, you will see a "Workspace ONE" tile. Click into this tile to enter your Workspace ONE Cloud Admin Hub.
Each tenant has its own tile that you must use to sign in to each service. Workspace ONE Cloud SSO authenticates your VCS account into each tenant.
The below video shows you how to:
- Select your DWPG organization in the VMware Cloud Services console
- From your VCS DWPG organization, drill into the Workspace ONE tile to the Workspace ONE Cloud Admin hub and DWPG tenants
- SSO into a couple tenants
Add a DWPG Owner
Don't lose access to your DWPG! If the owner of a DWPG leaves your company and they are the only owner, you will lose access to the DWPG. Be sure to maintain an active administrator account (a shared admin account) in your VCS DWPG organization.
Per VMware Cloud Services operations support policy, for VMware support to add an owner to a VCS organization, a vice president or higher at your organization must submit approval.
The VMware Cloud Services Console is where DWPG owners are managed. When brokered by Pathfinder, a DWPG receives a single organization owner in the environment. An owner is responsible for adding additional owners. Go to Cloud Services Console > Identity & Access Management to invite owners.
When adding an owner to your DWPG environment, you must assign the following:
- Organization Role: "Organization Owner"
- Service Role: "Workspace ONE" with role "admin"
The video shows you how to:
- Access user administration in the VMware Cloud Services Console
- Add an environment owner
When an invited owner enters console.cloud.vmware.com for the first time, they must select the DWPG organization. Be sure to let them know to select the DWPG org.
Onboarding Horizon Cloud Service - next-gen
Carefully, follow each step to successfully onboard your Next-Gen Horizon Cloud Service tenant.
The first time you click the Horizon Cloud Service tile, you will be prompted to select the control plane for your provisioned Horizon Cloud Service environment. You must select Next-Gen Horizon Control Plane. This is a one-time configuration.
If the bottom choice "Horizon Control Plane" is accidentally selected, you will need to file a Horizon Cloud Service support request to have it corrected.
Specific VCS organization roles are required to access the UI and APIs for the Horizon Universal Console. Use these instructions to assign these roles.
Once in your Horizon Cloud Service tenant, you must set up a pod. You'll not be able to do anything with Horizon Cloud Service until you set up a pod. DWPG does not include a pod. BYO pod. See the "Your new Horizon Cloud Service tenant environment and its portal" section in Horizon Cloud Deployments and Onboarding Pods — Horizon Pods on VMware SDDCs and Horizon Cloud Pods on Microsoft Azure
DWPG FAQ
Support for all DWPG services is provided by your pre-sales support resource. Otherwise, a DWPG is self-supported.
Refer to VMware Workspace ONE and Horizon Cloud Service product documentation.
Below you'll find answers and explanations to frequent DWPG questions.
Most likely, either the critical 'get started' email token wasn't cleanly used (step 6) or the new VCS org was not created (step 7).
Go back to step 6 and carefully proceed through.
Workspace ONE Assist is integrated with Workspace ONE UEM.
Just set up required device agents in UEM's application management, enroll and go.
Workspace ONE Cloud creates your admin account in the UEM tenant by setting your email address as your username. If you have a pre-existing account in the UEM environment where your email address equals username, the pre-existing account will conflict causing Workspace ONE Cloud SSO failure.
In the UEM CN environment, remove/replace the account where your email address equals a username.
If you need assistance removing the conflicting account, reach out to your pre-sales support contact. Pathfinder support can't access CN environments.
If a service has a renaming function, you can use its function to rename a tenant.
Please take care with the environment and its various services. Environment and tenant resets are not currently supported.