Connect VMWare SAML

Learn how to configure a connection to VMWare via SAML

Introduction

Each SSO Identity Provider requires specific information to create and configure a new Connection. Often, the information required to create a Connection will differ by Identity Provider.

WorkOS Provides

WorkOS provides the SP Metadata link. It's readily available in your Connection's Settings in the WorkOS Dashboard.

Overview

Next, provide the Metadata URL.

Normally, this information will come from your Enterprise customer's IT Management team when they set up your application's SAML 2.0 configuration in their VMware admin dashboard. But, should that not be the case during your setup, here's how to obtain it.

1

Create a new SaaS Application

In your Workspace ONE Catalog, click "New". Give your application a descriptive name.

2

Basic SAML Configuration

Click the "Configuration" tab from the left sidebar.

Copy the SP Metadata Link from your VMware connection in the WorkOS dashboard and paste it in the URL/XML field under Configuration in Workspace One.

3

Advanced SAML Configuration

Continue scrolling and expand "Advanced Properties".

Enable "Sign Assertion" and "Include Assertion Signature".

4

Configure Attribute Map

Continue scrolling until "Custom Attribute Mapping".

Fill in the following attribute mappings and select "Next".

  • id -> ${user.objectGUID}
  • firstName -> ${user.firstName}
  • lastName -> ${user.lastName}
  • email -> ${user.email}

NOTE: Some VMware configurations use user.ExternalId instead of user.objectGUID. In this case, you would map the id attribute to user.ExternalId.

5

Upload Metadata URL

After saving your SaaS Application, click "Settings" then "SAML Metadata". Click on "Copy URL" next to "Identity Provider (IdP) metadata".

Back in the WorkOS Dashboard, click on "Edit Metadata Management" in the "Metadata Configuration" section of the Connection.

Finally, input the Metada URL and click "Save Metadata Configuration". Your Connection will then be linked and good to go!