Starting with Workspot Control release 8.5, Workspot supports Azure Active Directory (Azure AD) as an optional method for authenticating your Workspot users’ access to the Workspot Client.
How Azure AD Support Works
Workspot's Azure AD support allows end-users to log into the Workspot Client using Microsoft's Azure AD services, using whatever settings for access, multi-factor authentication, etc. that you have set up with Azure AD.
Supported Workspot Clients
Azure AD is supported the following Workspot Clients:
- Workspot HTML5 Client.
- Workspot Windows Client v3.0 and up.
- Workspot Mac Client v3.0 and up.
- Workspot iOS Client v4.0 and up.
- Workspot Android Client v4.0 and up.
About Microsoft Azure AD
Azure AD is Microsoft’s cloud-based directory and identity management service. See Microsoft’s What is Azure Active Directory? for more information.
- Workspot Control release 9.0: Both Workspot and Kiosk modes are supported.
- Workspot Control release 8.5: Initial release. Kiosk-mode only.
Configuring Workspot for Azure AD
- Workspot’s Azure AD support an optional feature. To make it available for your deployment, contact your Workspot customer service representative.
- To use Azure AD with Workspot, you need an existing, configured Azure AD subscription for your organization.
- Your Azure AD deployment must be synchronized with your Active Directory servers used by your Workspot Enterprise Connector.
- You need your organization’s Azure AD global administrative credentials to authorize Workspot access to your Azure AD service.
- You need administrator-level access to your Workspot Control account.
- Have a system on which you can run an Azure AD-compatible Workspot Client, such as the HTML5 Client (if enabled for your organization) or the Workspot Windows Client v3.0.
- This Azure AD support does NOT replace the Workspot Enterprise Connector. The Workspot Enterprise Connector and its connection to your AD server are currently still required.
- The Workspot Agent is unchanged. This means that end-users will log into remote desktops and applications as before. Only the login to the Workspot Client changes.
- Azure AD currently cannot be disabled by the Workspot customer, but only by Workspot Support.
To configure Workspot to use Azure AD:
- Log onto Workspot Control as a Workspot Administrator
- Navigate to Setup > Configuration.
- Find the Azure AD Auth section and click the “Enable” button.
Note: Screen configurations will vary slightly from those shown.
- A descriptive screen will appear. Read it and press the “Continue” button.
- A Microsoft login window will pop up. Enter your Azure AD administrative credentials.
- The Microsoft Azure AD system will ask you to approve Workspot read-only access to your user profiles. Click “Accept.”
- Azure AD access has been enabled. Workspot Control will now give you the opportunity to log your browser out of the Azure AD administrative account. To sign out, click your account under the “Pick an account” heading.
- When you return to the Configuration page in Workspot Control, Azure AD Authentication will be shown as “Enabled.”
Testing Your Installation
Test the installation on a system with an Azure AD-compatible Workspot Client.
- Exit and restart the Workspot Client to ensure that the Client has polled Workspot Control for the latest configuration.
- You will be prompted to log in via a Microsoft login screen (similar to the one you used when enabling Azure AD).
- Log in with valid Azure AD user credentials.
- The Workspot Client shows your desktops and apps.
Event Log Messages
Workspot Control logs the initiation, success, or failure of the Azure AD setup process, as shown in the image below.
Note: If you close your browser partway through the process, subsequent log messages are not guaranteed.