Experience Workspace ONE through the eyes of an employee using their personal iOS device to access their corporate resources. In this walkthrough, we will see the experience of using a personal device in an unmanaged state and managed state and the features available with adaptive management.
- Section 1: Login to Workspace ONE
- Download the Workspace ONE app
- Login with corporate credentials
- Section 2: Workspace ONE Unmanaged Features
- Workspace ONE Launcher
- Workspace ONE Catalog
- VMware Boxer
- Section 3: Adaptive Management
- Section 4: Remove Account
Before You Begin
Before you begin this walkthrough ensure you have the following:
- An iOS device (we recommend updating to the latest version of iOS)
- A valid account in the VMware TestDrive environment, sign up here if you do not yet have an account
- Activated Workspace ONE UEM (formerly VMware AirWatch) service from the My Products tab in the TestDrive Portal.
- Activated Blue Jeans and Salesforce from the Sample Integrations section in the TestDrive Portal.
Section 1: Login to Workspace ONE
Ensure you're starting with an unenrolled iOS device. First, Navigate to the app store and download the VMware Workspace ONE app.
Once the app installs, launch the app and enter your TestDrive email address.
Your TestDrive email address follows the below format:
If you're unsure what your TestDrive email address is, you can verify this in the TestDrive portal by following the steps below:
- Login to portal.vmtestdrive.com with your username and password
- Click on the dropdown next to Workspace ONE in the Ready to Use Experiences section to view your credentials
- Here you will find your TestDrive email address
Enter your TestDrive email address and select Next.
Next, enter your TestDrive username and password and click "Sign In".
Next, the Workspace ONE app will load your environments settings.
Next, we'll select the demo we would like to perform. In this guide we're logging in as a BYOD device so select "Enterprise - BYOD Demo" from the dropdown.
Section 2: Workspace ONE Unmanaged Features
Next, we will be brought to the Workspace ONE bookmarks. Here we have all the web and Horizon apps that have been provisioned to our user. By simply clicking an icon Workspace ONE will single sign you into these apps using SAML authentication. Note that for Horizon apps you will need to install the native horizon app from the "catalog" tab before launching. If you don't install the Horizon app the desktops will open in the Safari browser.
Next, lets take a look at the Workspace ONE unified app catalog. You'll see the user can add web, virtual, and native apps all from their unmanaged device. You'll also notice some of the native iOS applications have a star icon. Native apps which contain a star icon require the activation of the Workspace Services profile, in other words this requires operating system mobile application management. Native apps that do not contain a star icon can be installed on the unmanaged device (per the policy which was defined by the admin). In addition, the VMware apps (including VMware Boxer, VMware Content Locker, VMware Browser, and more) will be automatically configured for the user using the Workspace ONE UEM SDK. To see an example of a configured app lets download VMware Boxer from the catalog (alternatively you could also download VMware Content Locker).
Note: please make sure you have enabled Office 365 for your Testdrive account before installing VMware Boxer.
Search for VMware Boxer in the app list and select install. Note this app does not have a star icon, therefore, it is permitted to be installed on unmanaged devices.
Click Install to confirm. You'll be redirected to the native app store to install the app.
Once installed, you'll see when launching VMware Boxer that the user's email is already configured. You'll just need to enter your Testdrive password and click "Get Started".
Section 3: Adaptive Management
Next, lets consider the scenario where a user wants to access an app which requires the Workspace Services profile (an app which contains a star icon). Previously, users had to download a separate app (the AirWatch agent) to activate the Workspace Services profile, however, now this entire process can be completed from the Workspace ONE application. Navigate back to the Workspace ONE app and choose the catalog tab. To initiate the process select any locked application. For this example, we will select Salesforce.
Next, click to install the app.
The user is informed that this app requires the Workspace Services profile and has the option to select "Your Privacy" to learn what information can be viewed or not for the user if they choose to activate the Workspace Services profile.
Select "Your Privacy" to view the privacy page. After reviewing the details select "Done".
Next the user can proceed to to install the Workspace Services profile (or not). For our demo we will select "Enable Workspace Services".
The browser will open to initiate access to the configuration profile. Select Allow to continue
The device will next be directed to install the Workspace Services profile. Select Install to continue. Continue through the installation prompts until you are brought back to the Workspace ONE app.
Now you have successfully installed the Workspace Services profile and you will be able to access all apps, even ones that were previously locked.
Next, you'll be brought to install the app you were attempting to install previously. See that it no longer contains a star icon. Click Install and the app will begin installing on the native springboard.
At this point your device has access to all OS level MAM features including app config, remote commands, compliance policies, and more. All apps will be available for download from the Workspace ONE catalog.
Section 4: Remove Account
Best Practice: When you are finished with your demo and want to remove your device from the Testdrive environment, best practice is to open the Workspace ONE app on the device, click account in the top right, and choose "Remove Account". Do NOT issue a delete or enterprise wipe from the Workspace ONE UEM admin console unless you have selected "Remove Account" within Workspace ONE first.