Multi-Factor Authentication in the Intelligent Hub

The Workspace ONE Intelligent Hub's next great evolution is multi-factor authentication (MFA) support.  With the modern Intelligent Hub and Workspace ONE Access's Verify Intelligent Hub authentication method, at no additional cost, organizations have a super-simple and streamlined MFA solution for their Workspace ONE applications.

In the digital workspace, Verify Intelligent Hub is an industry-first MFA solution. VMware TestDrive is glad to provide this Workspace ONE Intelligent MFA demonstration.  

Contents

  1. Before You Begin
  2. Talking Points
  3. MFA Simplicity with the Intelligent Hub
  4. Appendix A - Admin Settings

Before You Begin

You need:

  • A valid account in the VMware TestDrive portal.
  • Activated Dropbox integration the TestDrive portal.
  • A device either enrolled or registered into TestDrive's Workspace ONE UEM environment. 
  • Workspace ONE UEM admin role Device Administrator at World Wide Enterprises
  • To check out this excellent TechZone video.

Talking Points

  • No phone number, no preregistration of users, and no separate MFA app are needed. 
  • The Verify Intelligent Hub authentication method works on devices both registered and enrolled using the Intelligent Hub.  Therefore, all Workspace ONE Intelligent Hub users—regardless of their device management type—can utilize MFA in the Intelligent Hub. 
  • All of your organization's web apps and virtual apps can be set up fro MFA in the Hub.  As well, accessing Workspace ONE itself can use it!

MFA Simplicity in the Intelligent Hub

First, ensure you have a device either enrolled or registered into Workspace ONE UEM.  This is your MFA device.

Simulating a home or public computer, on an unenrolled device, open a browser and go to the TestDrive Workspace ONE instance:

       testdrive.vidmpreview.com

Log in with your TestDrive username and password.

Find the Dropbox web app and launch it.  

mceclip0.png

If you can't find the Dropbox web app, most likely Dropbox has not been enabled on your TestDrive account.  Log in to the TestDrive portal, go to Sample Integrations > enable Dropbox
Note: Sample Integrations have licensing limitations.  

Upon initial Dropbox launch, Workspace ONE Access's Verify Intelligent Hub authentication will kick in.  The countdown clock (time limit) is configurable in Workspace ONE Access's authentication method settings for Verify (Intelligent Hub).

mceclip0.png

If you have multiple devices enrolled/registered in Workspace ONE, each of those devices is listed in the dropdown.  Select your in-hand device.

HubVerify1.png

In a moment, the device will receive a push notification in the Intelligent Hub.

Note the countdown clock in the upper right of the Hub's notification. 

Screenshot_20200915-144731_Hub.jpg

The priority notification provides the sign-in request's user, device, and IP information.

Enhanced Verification

In Workspace ONE Access, we have configured the Verify (Intelligent Hub) authentication method to enforce app level security when approving the access.  Depending on your MFA device's authentication setup, you'll first be prompted for either a biometric or passcode confirmation to approve the sign-in request.  

In the Hub on your Verify device, approve the Dropbox sign-in request. 

Back on your home computer, access is granted.  

mceclip1.png

 

Appendix A - Workspace ONE Access Admin Settings

The Workspace ONE Access settings for the authentication method Verify (Intelligent Hub) are shown below.  

VMware_Workspace_ONE.png

After drilling into the authentication method (above), enhanced verification settings are set within (below).

mceclip0.png 


Review Our Knowledge Base

 

Have more questions? Submit a request

Article is closed for comments.