Administrator Guide

Table Of Contents
Configure Workspace ONE Mode
VMware Workspace ONE mode enables you to connect to remote desktops and applications through the Workspace ONE Web
Portal. As a Horizon administrator, you can enable the Workspace ONE mode on a Connection Server instance. Horizon Client
users are redirected to a Workspace ONE server to launch their remote desktops and applications.
Steps
1. Open the VMware Connection Server console.
2. Go to Settings > Servers > Connection Server and click the Authentication tab.
3. From the Delegation of authentication to VMware Horizon (SAML 2.0 Authentication) drop-down list, select
Required.
4. Click Manage SAML Authenticators to add your Authenticator.
5. Select the Enable Workspace ONE mode check box.
6. Enter the Workspace ONE Server hostname and click OK.
7. Log in to the ThinOS client.
8. From the desktop menu, click System Setup, and then click Remote Connections.
The Remote Connections dialog box is displayed.
9. In the Broker Setup tab, select VMware Horizon from the Select Broker Type drop-down list.
10. Enter the server URL in the Broker Server field.
11. Click OK and restart the thin client.
The VMware Workspace ONE login window is displayed.
12. Enter the user credentials and click Sign In.
NOTE:
The ThinOS lock terminal is not supported in Workspace ONE Mode. When you attempt to lock the terminal, a
warning message is displayed prompting for automatic sign-off. Click Continue if you want to sign out from the session.
NOTE: The Remember this setting option in Workspace ONE web portal is not supported due to the customized
browser limitation.
Unified Access Gateway
ThinOS supports Unified Access Gateway (UAG) that is used to securely access remote desktops and applications that are
outside a corporate firewall. For information about the latest version of Unified Access Gateway, see Unified Access Gateway
Documentation at docs.vmware.com.
VMware Horizon 7.11 with Unified Access Gateway 3.8 and later uses SAML-based multifactor authentication. It supports many
modern cloud-based solutions including the Azure multifactor authentication.
Configure Unified Access Gateway on ThinOS
Prerequisites
Configure the Unified Access Gateway (UAG) setting on the server side. For more information about configuring the
server-side settings for UAG, see the VMware Unified Access Gateway documentation at docs.vmware.com.
Open the connection server admin page, and specify the UAG information in the following sections:
HTTP(s) Secure Tunnel
PCoIP Secure Gateway
Blast Secure Gateway
Steps
1. Start the ThinOS client.
2. From the desktop menu, click System Setup > Remote Connections.
The Remote Connections dialog box is displayed.
3. On the Broker Setup tab, select VMware Horizon from the Select Broker Type drop-down list.
4. In the Broker Server field, enter the Unified Access Gateway URL.
Configuring connection brokers
95