The further detail about prerequisite and procedure of enterprise federation can be found here. 3rd party identity provider for single sign-on i.e.An email address associated to public domain, which need to be registered as myvmware account.As part of federation, TXT record need to be added in domain.Connector machine need to be domain joined.

Connector machine needs the reachability to internet.

A windows machine for Workspace ONE connector.

Horizon Cloud tenant/POD version 20.3 (manifest 2298.0) or later.

VMware enables the feature to Horizon Cloud tenant in request base. Note: The federated identity management feature is in Limited Availability as of August 2021. However, it is also possible to completely block the legacy authentication. See below video to understand how the authentication is different with and without enterprise federation.Īs per your requirement you can use both legacy 2 steps authentication and federated identity authentication at a same time. Authentication is enabled using VMware Cloud Services federated identity management also know as enterprise federation. The first authentication is based on myvmware account and the second is active directory (AD) which is registered to Horizon Cloud POD.Īs per Jupdate, Horizon Cloud supports both single sign-on (SSO) and multi-factor authentication (MFA), providing enhanced security for administrators accessing the horizon universal console. By default, horizon universal console comes with 2 steps authentication.

Vmware uag azure mfa