Setting up VMware Workspace ONE Access Authenticator Application to enable two-factor authentication

This feature enables Authenticator App authentication method in Workspace ONE Access for two-factor authentication. By allowing this user will be required to enter Time-based One-time (TOTP) passcode from an Authenticator application like Microsoft Authenticator/ Google Authenticator to login into Workspace One Access.

Prerequisites

Workspace One Access Manager

Workspace One Connector

Identity Provider/Directory services

Reference Articles

Configure an Authenticator App for Two-Factor Authentication with Workspace ONE Access

Add Authentication Rules Workspace ONE Access Default Access Policy

Steps to configure Authenticator App and Enable the Built-in Identity Provider

Access the VMware Workspace One Access Manager administration console

Navigate to the Integrations tab

Click Authentication Methods on the left pane

Select Authenticator App

Click Configure

Enable Authenticator Adapter Authentication

Configure allowed/ re-try/lock-out time

Enter any custom text for first-time registration (Usually involves adding steps to help or calling the service desk if there are any issues)

Enter recovery text

Click Save

Navigate to the Integrations tab

Click Identity Providers on the left pane

Select your Directory IDP/Builtin IDP

Enable the Authenticator App

Click Save

Add Authentication Rules to Workspace ONE Access Policy

Navigate to Resources Tab

Click Policies on the left pane

Select the Access policy

Click edit

Click Next

Select and configure the policy rules

Click the plus sign to add an additional Authentication method

Click the drop-down

Select Authenticator App from the drop-down

Note: The policy configured will allow any users assessing from a web browser to first authenticate using a password and then Authenticator App

Click Save

Click Next

Review and verify the details

Click Save

Validation

The user enters the directory credentials

Click sign in

First time user is prompted to configure the Authenticator app

Enter the code displayed on the Authenticator app

Click Enter

Login Success

User Administration for Authenticator app

Access the VMware Workspace One Access Manager administration console

Navigate to the Accounts Tab

Click Users on the left

Search and select the user from the user’s list

Click the Two-Factor Authentication tab

Here is the place to check/reset the settings for the user

Workspace One Access, Authenticator App for Two-Factor Authentication Configuration is complete.

Thanks

Santosh