Improving MFA with Workspace ONE Access and User Choice of Authentication Method
Since January 2024, the Workspace ONE Access SaaS instances have a new feature that is bringing MFA to the next level for users. While I created some videos during that time, I somehow never documented it in a blog, so I finally did this in July 2024. To use the choice of authentication, go toUse Microsoft Conditional Access Registration status in Workspace ONE Intelligence for Reporting and Automation
With the UEM 23.10 Update for Conditional Access ( Details here: https://digitalworkspace.one/2023/12/20/workspace-one-uem-conditional-access-update-with-uem-23-10/ ) the UEM Admin part was much easier, but I thought it might be a good thing to not stop there. So what about to have this functionality in Intelligence, so having Reports, Dashboards and Automations there to have full visibility over theGet started with Play Integrity and Omnissa Workspace ONE UEM
As we saw some of false positive of SafetyNet Attestation on Android as part of compromised detection that customers may experience, like documented here https://kb.omnissa.com/s/article/83272, there are major improvements on the with the newer Play Integrity API released by Google (https://developer.android.com/google/play/integrity) and also used by Workspace ONE UEM. Troubleshooting issues is just so much easier
It is now time to apply for the new EUC Experts 2024!
Note as of Nov 2024 : This Content is outdated and will be replaced soon with the details of the new Omnissa Tech Insiders Program. With the intent of the divest of the EUC Devision from VMware by Broadcom (details here : https://blogs.vmware.com/euc/2023/12/an-exciting-new-era-for-end-user-computing.html ) also the vExpert EUC Sub Programm is moving to a separateWorkspace ONE UEM Conditional Access Update with UEM 23.10
Since 2020 Workspace ONE UEM supports Conditional Access with Microsoft Azure AD (now Entra ID) . While last year Omnissa expanded support for Google BeyondCorp Conditional Access, I was still missing a nice GUI to see if a Device is registered or not and also a API that gets back the Registration was not thereAdding Groups when using SAML JIT in Workspace ONE Access
In this Blog we unravel the intricacies of integrating groups seamlessly into the SAML Just-In-Time (JIT) provisioning process within Workspace ONE Access. Navigating through this often mystifying terrain, we address a key challenge – adding groups – a task not directly facilitated through the GUI of Workspace ONE Access . Instead, we’ll guide you through