If you missed all of our announcements around this in the last few weeks, VMware Workspace ONE Intelligent Hub is the replacement of the VMware AirWatch Agent. The first phase of the rollout is to be an in-place upgrade for iOS and Android devices that are already enrolled into Workspace ONE UEM. By default, the changeover to Intelligent Hub on iOS and Android brought a new icon and branding change and didn’t require any re-enrollment of devices and functioned with the same capabilities as the Agent. We also flowed the look and feel changes through to macOS and Windows 10 device Agents too.
However, for the last 18 months or so we’ve had the Workspace ONE App. This App includes a heap of capabilities that the Agent didn’t have. It was the entry point and enrolment method for Adaptive Management and Unified Catalog and was a a key part of our Conditional Access strategy allowing different levels access to resources based on Ownership Type, Network Location, Management Status etc.
In the Release Announcements VMware also mentioned about unifying the capabilities of the AirWatch Agent and the Workspace ONE App into a single unified Intelligent Hub. If you go back to the first paragraph you would notice I said by default it only replaced the capabilities of the Agent. At VMworld Las Vegas we showed off the full Intelligent Hub capabilities and with Workspace ONE UEM Console 1810 Release the full Workspace ONE Intelligent Hub capabilities are now GA on iOS and Android to all, with Windows 10 and macOS to be released at a later date.
I hadn’t set this up in my lab yet as I was on leave during the whole release period, and being a tinkerer I wanted to make sure I had the latest capabilities for some upcoming customer demos. The configuration wasn’t exactly straight forward (in all honesty I hadn’t read any documentation and hadn’t completed the training on what the current capabilities were, but shhh…) so I thought I’d just quickly write up the steps to bring all the Workspace ONE App capabilities into the Workspace ONE Intelligent Hub to unify the capabilities of all agents.
- A VMware Workspace ONE UEM ver. 1810+ environment
- A VMware Identity Manager SaaS tenant
The assumption for what I’ll talk about below is that they are configured appropriately to allow sign-in with Active Directory credentials and integration between the two so that we can see a Unified App Catalog (SasS, Web, Native and Virtual Apps/Desktops). If you just wanted to enable Intelligent Hub and use the Native App Catalog inside the Intelligent Hub App, you don’t need to actually have Identity Manager configured at all. You just need to have a tenant and have admin credentials, then our API integrations from the UEM Console will push the required configuration to it.
It’s also important to note that in order to use the full Intelligent Hub capabilities you need a SaaS Identity Manager tenant. There are micro-services that are only available in SaaS environments and the capabilities will not function if you point your Workspace ONE UEM Console at an On-Premises environment.
Let’s get it configured.
Go to your Workspace ONE UEM Console and navigate to the Organisation Group that you want to configure Intelligent Hub at. Then, go to Groups & Settings and you’ll see a ‘Hub Configuration’ option.