iOS - Workspace ONE Adaptive Management


In this walkthrough we're going to show you how to demonstrate the adaptive management features of Workspace ONE on your iOS device. First, we will login to Workspace ONE on your unmanaged device and review the standalone mobile application management (MAM) features. Next, we will try to access a native app which has been restricted to require full operating system MAM and walk through registering our device to full OS MAM through Workspace ONE.

Walkthrough Summary

  • Download Workspace ONE from the app store
  • Authenticate with corporate email address and credentials
  • View standalone Workspace ONE features including VMware Boxer, VMware Content Locker, web apps, and Horizon apps
  • Attempt to access an application which requires operating system mobile application management
  • Walk through device registration so that the device is now able to access all applications
  • Best practices for removing your device from the environment
  • In order to complete this demo please make sure you have the following:

    • An iOS device
    • A valid account in the VMware TestDrive environment, signup here if you don't
    • Activated the AirWatch service from the My Services tab in the VMware Testdrive Demo Portal. See instructions for turning on this service here.
    • Network access from your device and TCP port 443 enabled on your network
    • In order to launch into the Horizon apps within Workspace ONE TCP ports 80 and 7443 must be enabled on your network

    First, start with an unenrolled iOS device. Navigate to the app store on the device and download VMware Workspace ONE.

    Launch Workspace ONE and you'll be prompted to enter a tenant URL or company email. For Testdrive we'll use email. Your email address for Testdrive is the domain with which you registered with at the portal with vmtestdrive.com appended onto the end. For example If your email address is  eucawdemo@company.com your Testdrive email address would be eucawdemo@company.vmtestdrive.com

    You may also verify which email address to use for enrollment if you refer back to the My Services page in the VMware TestDrive Demo Portal web application ( portal.vmtestdrive.com). Once logged into portal.vmtestdrive.com select the "My Services" card and the "i" icon next to VMware AirWatch.

    Enter your modified email address into the email address box and click “Next” 

    Now that Workspace ONE has identified our VMware Identity Manager tenant, we can authenticate with our credentials. Enter your TestDrive username and password (without a domain) and click "sign in".

    Next, we will select our demo of choice from the dropdown. For this walkthrough we are covering the Enterprise BYOD scenario so select "Enterprise - BYOD demo" and choose "Proceed". 

    Next, we will be brought to the Workspace ONE launcher. Here we have all the web and Horizon apps that have been provisioned to our user. By simply clicking an icon Workspace ONE will single sign you into these apps using SAML authentication. Note that for Horizon apps you will need to install the native horizon app from the "catalog" tab before launching. If you don't install the Horizon app the desktops will open in the Safari browser. 

    Next, lets take a look at the Workspace ONE unified app catalog. You'll see the user can add web, virtual, and native apps all from their unmanaged device. You'll also notice some of the native iOS applications have a lock icon. Native apps which contain a lock icon require the activation of the Workspace services profile, in other words this requires operating system mobile application management. Native apps that do not contain a lock icon can be installed on the unmanaged device (per the policy which was defined by the admin). In addition, the VMware apps (including VMware Boxer, VMware Content Locker, VMware Browser, and more) will be automatically configured for the user using the AirWatch SDK. To see an example of a configured app lets download VMware Boxer from the catalog (alternatively you could also download AirWatch Content Locker).

    Note: please make sure you have enabled Office 365 for your Testdrive account before installing VMware Boxer. Instructions to enable the service can be found  here.

    Search for VMware Boxer in the app list and select install. Note this app does not have a lock icon, therefore, it is permitted to be installed on unmanaged devices.

    Click Install to confirm. You'll be redirected to the native app store to install the app.

    Once installed, you'll see when launching VMware Boxer that the user's email is already configured. You'll just need to enter your Testdrive password and click "Get Started".

    Next, lets consider the scenario where a user wants to access an app which requires the Workspace services profile (an app which contains a lock symbol). Previously, users had to download a separate app (the AirWatch agent) to active the workspace services profile, however, now this entire process can be completed from the Workspace ONE application. Navigate back to the Workspace ONE app and choose the catalog tab. To initiate the process select any locked application. For this example, we will select Salesforce.

    Next, click to install the app.

    The user is informed that this app requires the Workspace Services profile and has the option to select "Learn More" to learn what information can be viewed or not for the user if they choose to activate the Workspace services profile. Click learn more to view the privacy page.

    After reviewing the details select "Done".

    Next the user can proceed to to install the Workspace services profile (or not). For our demo we will select proceed.

    The device will next be directed to install the Workspace Services profile. Select Install to continue. Continue through the installation prompts until you are brought back to the Workspace ONE app.

    Now you have successfully installed the Workspace Services profile and you will be able to access all apps, even ones that were previously locked. 

    Next, you'll be brought to install the app you were attempting to install previously. See that it no longer contains a lock symbol. Click Install and the app will begin installing on the native springboard.

    At this point your device has access to all OS level MAM features including app config, remote commands, compliance policies, and more. All apps will be available for download from the Workspace ONE catalog. 

    Best Practice: When you are finished with your demo and want to remove your device from the Testdrive environment, best practice is to open the Workspace ONE app on the device, click account in the top right, and choose "Remove Account". Do NOT issue a delete or enterprise wipe from the AirWatch admin console unless you have selected "Remove Account" within Workspace ONE first.

    Walkthrough Summary

  • Download Workspace ONE from the app store
  • Authenticate with corporate email address and credentials
  • View standalone Workspace ONE features including VMware Boxer, VMware Content Locker, web apps, and Horizon apps
  • Attempt to access an application which requires operating system mobile application management
  • Walk through device registration so that the device is now able to access all applications
  • Best practices for removing your device from the environment
  • Check out the  TestDrive Support KB for further walkthroughs, FAQs and information regarding the VMware Global Demo Environment.

    For support or to report issues with any of the demo systems please send us an email.