The Workspot Client is a full function workspace client. In addition to supporting Workspot desktops and RD Apps, The Client’s built-in secure browser enables you to deploy secure access to any Web application, whether in the public Cloud or behind a firewall.
This document tells you (the administrator) how to configure Workspot to use your Web Apps, and how Web Apps appear to your end-users.
Workspot provides a simple, straightforward, secure end-user experience while giving you control over end-user access.
- You can deliver any number of Web Apps.
- Different users can see different apps, as defined by you.
- When users launch the Workspot Client and sign in, they see their all their Workspot resources, including Web Apps, but also Workspot desktops and RD Apps.
- You can optionally configure the Workspot Client’s built in single sign-on (SSO) to remember the user’s credentials on a per-app basis, simplifying sign-in.
- Web Apps can optionally use your VPN or require a direct connection. The Workspot Client has built-in support for popular VPNs. When used with a compatible VPN, users don’t have to launch a separate VPN client.
- Access to Web Apps can be assigned based on group membership or even at the individual level. Users see only the Web Apps that have been assigned to them.
For example, the Workspot Client main screen below has a Web App called “Acme Industries,” which connects to https://www.acme.com.
Workspot Client showing a Web App, “Acme Industries.”
This user also has two Workspot Desktops and access to several other Apps. When the user clicks the icon, the Client’s built-in secure browser is launched and the user is taken to the Acme Web site:
A Web App uses the Workspot Client’s built-in secure browser.
The Workspot Client is VPN-aware, containing several built-in VPN Clients (Cisco, Juniper, F5, and Fortinet). If the Web App definition calls for a VPN connection, one is launched automatically. You declare your organization’s VPNs in Workspot Control in “Setup > VPN,” and the information is propagated to the Workspot Clients.
The Workspot Client also supports SSO (single sign-on), optionally remembering credentials. These do not have to be the same for the Web App as for the Workspot Client sign-in. When enabled, the user need only sign into a Web App once. This SSO is locked in an AES-256-bit vault specific to that user’s client. For extra security, the client will erase the vault if there are 10 consecutive failed attempts to log into the Workspot Client. If this happens, the user will be prompted to re-register their Client and verify their identify (which only takes a few minutes and has no effect on their remote resources).
Web Apps are managed in Workspot Control. Points of interest:
- Web Apps are created and edited under “Resources > Applications.”
- Web Apps are assigned to “application bundles” under “Resources > Applications.”
- Applications bundles are assigned to users at the group level, one bundle per group, under “Users > Group > App Bundle.”
- Individual applications can also be assigned (or unassigned) on a per-user level (under “Users > username > Entitlements > Apps > Apps Assignment”), so any user can have any set of applications.
Adding a new Web App.
Sign into Workspot Control as an Administrative user. Go to “Resources > Applications > Add Application” and fill out the form that appears.
The fields are mostly self-explanatory. Some details are given below:
- Web Apps have an “Application Type” of “Web.”
- The “Application Name” is the label the user sees on the Web App icon.
- If the user needs a VPN to reach the app, make sure you’ve defined a VPN under “Resources > VPN” and select “Yes” for “Route App Traffic Through VPN.” (VPNs are applied at the group level, so you may have to edit or create a group to contain the VPN assignment.)
- If you use a custom icon for the Web App, upload it in as a 144x144-pixel image in PNG format.
- If you want the Workspot Client to remember the end-user’s Web App credentials, select the appropriate credential format in the “Login Type” menu. Otherwise, select “Disable Single Sign-On.”
- By default, the Web App is added only to the “All Apps” application bundle. Expanding the “Bundles” section and adding the Web App to an appropriate bundle is appropriate. New app bundles are defined in “Resources > Bundles > Add Bundle,” and existing app bundles are edited under “Resources > Bundles > ”
- Web Apps can also be assigned on a per-user basis under “Users > username > Entitlements > Apps > Apps Assignment.”
Editing a Web App
Editing a Web App is similar to creating it. It is reached by “Resources > Applications > appname.” When editing, you can edit everything but the application type. The top of the page also shows some statistics about application usage.