This is the essential, getting started with a Digital Workspace Proving Ground (DWPG) guide. In this guide, learn what a DWPG is, how to request a DWPG, onboard a DWPG, and answers to frequent questions.
DWPG Overview
Requested through the VMware Discovery platform, a Digital Workspace Proving Ground (DWPG) is a regionally located, fully integrated, non-expiring, enterprise-level digital workspace sandbox environment in the Workspace ONE Cloud.
With enabling our partners top of mind, the DWPG was developed so that an active partner organization could have its own dedicated, production-level, digital workspace sandbox environment for demos and testing.
A DWPG is a complete Workspace ONE Cloud environment that contains the following services:
- Workspace ONE Intelligence
- Workspace ONE UEM with Workspace ONE Assist & Workspace ONE Freestyle Orchestrator
- Workspace ONE Access
- Workspace ONE Hub Services
- Horizon Cloud Service - next-gen
- Digital Employee Experience Managment
- VMware Identity Services
A DWPG is available to active VMware partners and VMware employees.
Prerequisites
- You must be a member of an active VMware partner organization, a vExpert, or a VMware employee.
- You must have a VMware ID that's verifiable as one of the above permitted user types.
- Your network must permit email from "vmwservices.com" to be delivered to your mailbox.
DWPG Setup
Time to complete: < 10 minutes
A DWPG is a Workspace ONE Cloud environment. All Workspace ONE Cloud environments are accessed through the VMware Cloud Services Console from where the Workspace ONE Cloud Admin Hub provides access to each service.
The DWPG setup is a one-time procedure that requires you, a permitted user, to (1) request the DWPG and then (2) onboard it be creating a dedicated VMware Cloud Services Organization.
Before proceeding with the DWPG request, familiarize yourself with Cloud Services Organization management and the Workspace ONE Cloud Admin Hub.
To ensure a successful DWPG setup:
- Do not skip steps.
- Carefully follow each step: read all parts of each step.
DWPG Request
1. Log in to VMware Discovery using the Cloud Services Console and permitted VMware ID.
Using a private/incognito browser, go to discovery.vmware.com...and click LOG IN (upper right of the window).
Sign in with your permitted VMware ID using the CLOUD SERVICES CONSOLE.
If you do not have a VMware ID, on the Cloud Services Console sign-in screen, you'll need to CREATE YOUR VMWARE ACCOUNT.
Be sure to use your permitted email address.
2. Locate the DWPG activity.
After you have signed in using the Cloud Services Console and permitted VMware ID, use this link to go directly to the TestDrive area.
Locate the DWPG tile in the TestDrive area and drill into the DWPG tile.
If you do not see the DWPG tile, then either your not logged in or your VMware ID is not permitted to access the activity.
Verify that you're logged in through the Cloud Services Console with a permitted VMware ID.
3. Request access.
At this point, you can follow the guidance within the DWPG request UI. The activity contains a interactive simulation that walks you step-by-step through DWPG onboarding.
Use the REQUEST ACCESS button to initiate the provisioning request.
If you see CREDENTIALS instead of REQUEST ACCESS, the DWPG has already been set up and the organization member listed within CREDENTIALS is your DWPG owner. For access to the DWPG, reach out to the listed person directly or use the provided email function to contact them. You do not use the Discovery platform to access a Workspace ONE Cloud environment. You may now exit Discovery.
To proceed with a DWPG request, you must agree to the DWPG Disclaimer:
| Digital Workspace Proving Ground (DWPG) Disclaimer |
|---|
|
Hosted in the Workspace ONE Cloud, a Digital Workspace Proving Ground (DWPG) is a non-expiring, digital workspace demo environment where you have full administrative access. By proceeding with a DWPG request, you attest your agreement to the following:
|
DWPG Onboarding
4. With a private/incognito browser, use the 'Get Started' email's invitation link to log in to Cloud Services.
After provisioning, Workspace ONE Cloud will send you the crucial "Get Started with Workspace ONE" email. This email contains an invite token that must be properly redeemed.
- Launch an incognito/private browser.
- Copy the tokenized Get Started link and paste it into the incognito/private browser.
- Log in to Cloud Services using the same VMware ID used to make the request.
- Stop. Proceed to the next step.
Note for VMware Employees
This note is ONLY for VMware employees. When using the GET STARTED link, after a CSP login, if you are notified that,
You just logged in with a federated corporate account and do not have a VMware ID linked to it...
You must link your corporate account to your Vmware ID, as indicated in the notification.
5. Create a dedicated VMware Cloud Services Organization to contain your DWPG.
CAUTION CUIDADO ATTENTION
- You must create a new Organization.
- If you are first presented with a screen stating something like you have the Workspace ONE service associated with your account, go to the bottom of that screen and click ADD SERVICE TO ANOTHER ORG. Then on the next screen, click CREATE ORGANIZATION.
- If presented with a list of organizations, do NOT select an existing organization.
6. Name the DWPG organization.
The Organization Name is a friendly name used for identification purposes within the Cloud Services Console.
7. [Optional] Rename your Workspace ONE Access tenant's URL.
Rename it or leave it as is. Renaming may be desired as this URL is on the Workspace ONE User Portal.
8. Accept prompts to finalize the initial setup.
Follow and accept the prompts until you're in the Workspace ONE Cloud Admin Hub. Your Admin Hub should look like the image.
Note: Although shown as a tile, Mobile Threat Defense is not currently available to a DWPG.
9. On-board Horizon Cloud Service.
First, verify you have the proper Horizon Cloud Service Administrator role set in your DWPG Cloud Services Organization. Click here for VMware documentation on assigning administrative roles to Horizon Universal Console users.
After verifying your roles, when you click the Horizon Cloud Service tile, you will be prompted to select the control plane for your provisioned Horizon Cloud Service environment. You must select Next-Gen Horizon Control Plane. Click here for documentation on selecting the Next-Gen Horizon Control Plane.
If the bottom choice "Horizon Control Plane" is accidentally selected, you will need to file a Horizon Cloud Service support request with Cloud Services Support to have it corrected.
10. Add additional DWPG owners.
Do not lose the keys to your environment.
As noted in the opening of DWPG Setup, the Cloud Services Console and Workspace ONE Cloud Admin Hub are tightly integrated to provide user administration and tenant access.
When a Workspace ONE Cloud environment is provisioned, a single user is set up as the Organization owner, probably you reading this. No one else has access to the environment. You want to avoid the following scenario:
Scenario: If the sole owner of a Cloud Services Organization is no longer available to manage the Organization, access to the Organization—and the DWPG—will be lost. ^
Be certain to always maintain an active owner account in your DWPG Organization. Use the Cloud Services Console to manage your DWPG Organization.
Go to Cloud Services Console > Identity & Access Management to invite owners (Workspace ONE Cloud documentation).
When adding an owner to your DWPG environment, you must assign the following:
- Organization Role: "Organization Owner"
- Service Role: "Workspace ONE" with role "admin"
The video shows you how to:
- Access user administration in the VMware Cloud Services Console
- Add an environment owner
When an invited owner first enters Cloud Services, they must select the DWPG-dedicated Cloud Services Organization.
^ For VMware Support to insert an owner into a Cloud Services Organization, the requesting organization must submit a change request to Cloud Services Engineering with at least a Vice President's approval.
11. Verify your access.
DWPG onboarding is now complete. To verify your access to the services, perform the following:
- Verify that you are in your DWPG-dedicated Cloud Services Organization and not another Cloud Services Organization to which you are a member.
- Inside your DWPG-dedicated Organization, you will see a "Workspace ONE" tile. Always click into this tile to enter your Workspace ONE Cloud Admin Hub and SSO into the services. You must SSO into each service from the Workspace ONE Cloud Admin Hub.
The below video shows you how to:
- Verify your DWPG Organization in the console
- Enter the Workspace ONE Cloud Admin Hub from within the DWPG Organization
- SSO into a couple of tenants
DWPG FAQ
Support for all DWPG services is provided by your pre-sales support resource. Otherwise, a DWPG is self-supported.
Refer to VMware Workspace ONE and Horizon Cloud Service product documentation.
Below you'll find answers and explanations to frequent DWPG questions.
Please take care with the environment and its various services. Environment and tenant resets are not currently supported.
Most likely, either the critical 'get started' email token wasn't redeemed or a new dedicated Cloud Services Org was not created.
Go back to DWPG Onboarding and very carefully proceed through each step and bullet.
Authentication into the individual tenants if provided by the Workspace ONE Admin Hub via SSO. Therefore, you can not use your VMware ID to directly log in to a tenant.
You must log in using the Workspace ONE Cloud Admin Hub's individual service tiles.
Workspace ONE Assist is integrated with Workspace ONE UEM.
Just set up required device agents in UEM's application management, enroll and go.
Workspace ONE Cloud sets your UEM admin account as your email address in the tenant. If you have a pre-existing account where your email address equals username, the pre-existing account will conflict causing Workspace ONE Cloud SSO failure.
To fix it, the pre-existing account must be replaced or removed in the CN environment.
If you need assistance removing the conflicting account, reach out to your pre-sales support contact.
Do not rename the Workspace ONE UEM top-level group ID. Instead, create child OGs for enrollment and give those OGs friendly names.