Administration

Providing Unauthenticated Access for Published Applications 84
Create Users for Unauthenticated Access 85
Enable Unauthenticated Access for Users 86
Entitle Unauthenticated Access Users to Published Applications 86
Search Unauthenticated Access Sessions 87
Delete an Unauthenticated Access User 88
Unauthenticated Access From Horizon Client 88
Configure Login Deceleration for Unauthenticated Access to Published Applications 89
Configure Users for Hybrid Logon 90
Using the Log In as Current User Feature Available with Windows-Based Horizon Client 91
Saving Credentials in Mobile and Mac Horizon Clients 93
Configure a Timeout Limit to Save Horizon Client Credentials 94
Setting Up True SSO 94
Determining an Architecture for True SSO 95
Set Up an Enterprise Certificate Authority 98
Create Certificate Templates Used with True SSO 100
Install and Set Up an Enrollment Server 102
Export the Enrollment Service Client Certificate 104
Import the Enrollment Service Client Certificate on the Enrollment Server 106
Configure SAML Authentication to Work with True SSO 107
Configure Horizon Connection Server for True SSO 109
Command-line Reference for Configuring True SSO 111
Advanced Configuration Settings for True SSO 115
Identify an AD User That Does not Have an AD UPN 119
Unlock a Desktop With True SSO and Workspace ONE 120
Using the System Health Dashboard to Troubleshoot Issues Related to True SSO 121
6 Configuring Role-Based Delegated Administration 125
Understanding Roles and Privileges 125
Using Access Groups to Delegate Administration of Pools and Farms 126
Different Administrators for Different Access Groups 127
Different Administrators for the Same Access Group 127
Understanding Permissions 128
Manage Administrators 129
Create an Administrator 129
Remove an Administrator 130
Manage and Review Permissions 131
Add a Permission 131
Delete a Permission 132
Review Permissions 133
Manage and Review Access Groups 133
Horizon 7 Administration
VMware, Inc. 5