VMware Workspace ONE integrates VMware Identity Manager access control and application management with VMware AirWatch unified endpoint management (UEM) technology into a single platform. Available as a cloud service or for on-premises deployments, the Workspace ONE platform enables IT to deliver and manage any app on any device. Now, with the release of Identity Manager 3.0, it’s easier than ever to support advanced deployment options!
What’s New in VMware Identity Manager 3.0 |
| [tabs slidertype=”simple”] [tab]
Today’s deep dive provides technical details and video demos of the key features released in VMware Identity Manager 3.0. This section also briefly covers the other features introduced in the release. After the deep dive, there’s a section about key compatibility, upgrade and installation considerations. The post concludes with links to additional resources.[box]
|
New! VMware Identity Manager 3.0 Features |
[tabs slidertype=”simple”] [tab]
VMware Identity Manager 3.0 Deep DiveWatch this video to learn about some of the important features in VMware Identity Manager 3.0. The video provides a verbal description and a configuration demo of each feature. Afterwards, use the arrows below the video to flip additional details about the features covered in the deep dive. Application Sources
First, define the external access management system as an application source type. Then, add multiple apps of this type to the catalog. The application source definition contains the SAML contract details between Identity Manager and these external access management systems.[/tab][tab] Support for Multiple Apps from the Identity Manager CatalogIdentity Manager now supports adding apps from the catalog multiple times. Admins can add multiple copies using the templates in the global catalog. This simplifies the adoption of multiple instances of web applications, such as Salesforce that might be used by different lines of business or for different purposes within the organization. This new feature can:
[/tab][tab] Refresh Token TimeoutCreate a more intuitive authentication experience for the Workspace ONE app with the Idle Token Time-to Live (TTL) setting. This setting adapts the app’s authentication behavior based on how often individuals use Workspace ONE. Previously, end users re-authenticated when their refresh token expired, which occurred at a static interval. For users expecting recognition and trust from frequently used technologies, this was a clunky experience. Now, Identity Manager recognizes consistent users, and prompts them to re-authenticate less often. Identity Manager also recognizes inconsistent users, and triggers re-authentication by revoking their refresh. In addition to the Workspace ONE app, this feature applies to any other OAuth client of Identity Manager. However, only the Workspace ONE app enables the settings by default. Applying the idle token TTL setting to custom apps requires manual enablement.[/tab][tab] Idle TTL Token Use CaseThis setting is appropriate for organizations that want to minimize hassle and increase employee productivity (i.e. everyone). However, for the purposes of examining the feature’s usefulness, let’s examine how it would work in a specific scenario: World-Wide Enterprises. A large number of employees travel for work at World-Wide Enterprises, and require remote access to corporate resources. While generally pretty happy with the Workspace ONE app, employees in the field do find the re-authentication requests inconvenient. To address this usability concern, World-Wide Enterprises decides to take advantage of the new token refresh setting. First, they increase the refresh token’s time value to three months. Then, they configure the refresh token’s idle time value. They want this value to accommodate the weekend inactivity of the typical 9-to-5 schedule while maximizing security. Ultimately, they set the timeout at four days. Now, after a weekend or a short holiday, employees can access Workspace ONE for up to three months without re-authenticating.[/tab][tab] App Reordering (Desktop Browser Only)Now, users can rearrange bookmarked applications on their Workspace ONE app portal Bookmarks page. Users start with an alphabetized app view but can move app tiles around to create a custom, personalized view. The new user-curated view is saved for future sessions. [tabs slidertype=”simple”] [tab] What Else is New in Identity Manager 3.0?Use the arrows to flip through the remaining features in the Identity Manager 3.0 release. (The features and descriptions provided below were pulled from the the 3.0 Release Notes.) [/tab] [tab] Support VMware Horizon HTML Access on Android DevicesUsers can now launch VMware Horizon apps in a browser on Android devices from the Workspace ONE app (available for Android 7 and later).[/tab] [tab] Improved Sign-in Screens User ExperienceMobile device sign-in screens feature added animations, enhanced displays and improved error messages.[/tab] [tab] Enhanced In-App Search
|
Key Considerations |
[tabs slidertype=”simple”] [tab]
Compatibility Considerations
[/tab][/tabs][tabs slidertype=”simple”] [tab] Identity Manager Upgrade ConsiderationsTo upgrade to Identity Manager 3.0, see “Upgrading to VMware Identity Manager.” During the upgrade, all services are stopped, so plan the upgrade with the expected downtime in mind.
[/tab][/tabs] [tabs slidertype=”simple”] [tab]
|
Additional Resources |
[tabs slidertype=”simple”] [tab]
DocumentationRead the Identity Manager 3.0 release notes and technical documentation.[/tab][/tabs] |
 |
[/tab] [/tabs]
[author] [author_image timthumb=’on’]https://media-exp2.licdn.com/mpr/mpr/shrinknp_200_200/p/6/005/022/3e8/2179d51.jpg[/author_image] [author_info]Ben Siler, a Product Marketing Manager at VMware, reviewed this post.[/author_info] [/author]
