Enrolling into Workspace One UEM using Okta as the IdP is a great way to leverage your existing identity solution, whilst adding Workspace One to check device trust and add management.
1 -This article presumes the following:
- You’ve connected Workspace One UEM to vIDM, if not, follow this guide.
- You’ve added Okta as a IdP within vIDM. If not, follow this guide.
![](https://sp-ao.shortpixel.ai/client/to_auto,q_glossy,ret_img,w_1846,h_894/https://blog.eucse.com/wp-content/uploads/2019/01/Screenshot-2019-01-25-at-13.21.32.png)
![](https://sp-ao.shortpixel.ai/client/to_auto,q_glossy,ret_img,w_1845,h_894/https://blog.eucse.com/wp-content/uploads/2019/01/Screenshot-2019-01-25-at-13.21.43.png)
![](https://sp-ao.shortpixel.ai/client/to_auto,q_glossy,ret_img,w_1920,h_714/https://blog.eucse.com/wp-content/uploads/2019/01/Screenshot-2019-01-25-at-13.22.32.png)
![](https://sp-ao.shortpixel.ai/client/to_auto,q_glossy,ret_img,w_1920,h_969/https://blog.eucse.com/wp-content/uploads/2019/01/Screenshot-2019-01-25-at-13.22.45.png)
2 – Now that these pre-reqs are in place, we need to change the vIDM policies to leverage Okta as the IdP. This will automatically re-direct all users logging in to Okta. The example below is set to macOS but the exact same configuration can be set to iOS.
![](https://sp-ao.shortpixel.ai/client/to_auto,q_glossy,ret_img,w_1205,h_649/https://blog.eucse.com/wp-content/uploads/2019/01/Screenshot-2019-01-25-at-13.23.17.png)
![](https://sp-ao.shortpixel.ai/client/to_auto,q_glossy,ret_img,w_100,h_100/https://blog.eucse.com/wp-content/uploads/2020/07/08e319c7-a256-4039-8a9c-dfd751795eb4-4394.png)
Sales Engineer specialising in Unified Endpoint Management (UEM) and Identity Management.
Technical Expertise:
o Okta – Identity Management – Providing single sign on services to applications
o VMware Workspace ONE – Configuring and managing AirWatch components across all device types.
o Digital Transformation – Helping organisations implement and deploy a modern strategy for UEM
o Networking – VPN, DNS, DHCP
o Device Management – macOS, iOS, Android, Windows and Rugged Devices
o Cloud Solutions – Azure, Office 365, Identity Providers, VMware AirWatch
o Server – Windows Server, Active Directory, Exchange
Joaquin Cabrerizo
September 17, 2019does this article apply to macOS ? or only iOS ?
Charlie Hodge
September 17, 2019This will also apply to macOS as long as you’re not using DEP. DEP doesn’t currently support SAML based authentication when taking a macOS device straight out of the box.
Laxmikant Thanvi
May 8, 2023Hi Charlie
Is Same flow can be achieved in Okta with current version of Workspace ONE UEM , Access and Okta.
I followed and trying to join bits and pieces due to out dated links , But on iOS Intelligent hub it is not showing Okta page.
Could you please help me on that if possible.
Lk Thanvi
May 17, 2023With this setup I get Workspace One Access login page on Intelligent hub but not Okta page even policy is defined for the same in workspace one access.