Sync On-Premise Active Directory in Workspace ONE Access

Integrating with directory services eliminates the need to create basic user accounts in your organization. Such integration can also help simplify the enrolment process for end-users by applying the information they already know. Ongoing LDAP synchronization detects any changes within the system. This synchronization performs necessary updates across all devices for affected users.

we will use Workspace ONE Access Connector, and the Directory Sync Service, it works very well together with UEM implementation, Workspace ONE Access synchronize users using a read-only connection to the Active Directory

Steps:

1. We will add the Connector, and generate the Activation Code:

· From the Workspace ONE Access Console, click Identity & Access Management.

· In the top right, Click Setup.

· Click Legacy Connector.

· In the top right, click Add.

· Name your Connector to identify it properly and click on Generate Activation Code. This will create a key, we will use it later, so copy it and save it for later.

2. We will download Workspace ONE Access (formerly Identity Manager) Connector 20.01.0.1 and set it up at your windows server machine :

From the windows server machine:

· From the Workspace ONE Access Console, click Identity & Access Management.

· In the top right, Click Setup.

· Click New.

· Click GO TO MYVMWARE.COM.

· Click DOWNLOAD NOW, to download it.

· Once it is downloaded into your Windows Server Machine, please right-click on it, then click Run it as administrator then install it.

The VMware Identity Manager Connector service installed successfully. To configure VMware Identity Manager Connector, Select “Yes” to launch the browser or “No” to exit the installation.

The Workspace ONE Access (formerly Identity Manager) Connector has been downloaded and set up successfully.

3. complete setup from the Workspace Identity Manager Connector side:

· Click Continue.

· After clicking on Continue, you need to set Passwords, so enter your password, then confirm it, then click Continue.

· You will see the Activate Connector page, which you need to paste the previous Activation Code generated by Workspace One Access admin page, then click Continue.

Congratulations! You have achieved the complete setup from the Workspace Identity Manager Connector side.

4. We will bind Active Directory to authenticate and authorize your users to access it:

· From Workspace ONE Access console, click Identity & Access Management.

· Click Add Directory, then click Add Active Directory over LDAP/IWA.

· Type your Directory Name, which is your Domain FQDN (Fully Qualified Domain Name), then select the Sync Connector (the FQDN one which we installed), then select Directory Search Attribute to be sAMAccountName.

· At the bottom part, just put your bind user details (the bind user who has permission to query users and groups for the required domains), and the password as below, then click Save & Next.

· After a couple of seconds, Workspace One Access will get the Domain (or domains if you have more than one configured into your environment), click Next until you Click Sync Directory.

We have successfully Synced Active Directory in the Workspace ONE Access console.