Configuring Mobile Flows

Configuring Mobile Flows

Introduction

Mobile Flows helps users perform business-critical tasks from a single app - streamlining the user experience.

The components responsible for interacting with business systems are known as Mobile Flows Connectors. Use these connectors out-of-the-box for quick adoption, or customize then to address specific use cases. The Workspace ONE Connector presents Mobile Flows Cards inviting users to install apps that are missing from the user's device. The Mobile Flows Client Framework is in the VMware Workspace ONE® Boxer app and is responsible for parsing the e-mail body for keyword. Once one of the keywords matches, the Workspace ONE Connector is responsible for requesting the application from the Workspace ONE Catalog using a Mobile Flows Card within that particular e-mail itself. This connector uses application keywords, device UDID and device platform to request the correct app from the Catalog.

Workspace ONE offers out-of-the-box connectors targeting top use cases with the most popular business systems. All the source code for these connectors is open source, so anyone can modify the existing connectors or build their own custom connector using our API spec and sample connectors. Custom connectors can be built in around 250 lines of code or less and are flexible to be built using your preferred programming language. Custom Connectors allow you to match the data model of your business system and to create business logic that will meet the needs of your end users.

The Mobile Flows Client Framework embedded into Workspace ONE Boxer is responsible for parsing the email body for keywords and initiate the Mobile Flows card within the app. After that, Mobile Flows server does Connector discovery and authentication using the configuration in the Workspace ONE UEM Console.

 

  1. The VMware Identity Manager instance registers with the Mobile Flows Server.
  2. Application fetches a JSON Web Token (JWT) for Authentication.
  3. Application sends request to Mobile Flows Server to query details to form a Mobile Flow Card.
  4. Mobile Flows Server discovers Connector and requests content.
  5. Connector fetches and consolidates business system data for the Mobile Flow Card.
  6. Data is returned to the Mobile Flows Server.
  7. Data is delivered to the app.

Prerequisites

Before you can perform the procedures in this exercise, you must complete the following tutorials:

This exercise requires specific account details. Gather the required information, and record it in the following table. The account information provided in the table is based on a test environment. Your account details will differ.


Example Account Information
Workspace ONE Account
User Name
testuser

Password VMware1!

Exchange Active Sync Account 
Email Address yourid1234@hol.airwlab.com

Email Password VMware1!

Account Name
HOL Email

Domain hol

EAS Host https://sme.airwlab.com

sAMAccountName yourid

You must also satisfy the following requirements:

  • Enrolled iOS device
  • Access to Microsoft Exchange mailbox

Configuring the Remote App Access Template

In this section, watch a video that walks through setting up and configuring the Remote App Access Template in VMware Identity Manager. This template enables applications to request the JSON Web Token (JWT) token used to authenticate Mobile Flows traffic.

Note: The video contains no spoken instructions.  Refer to the subtitles for instructions about the installation process.

Building a Mobile Flows Connector

In this section, watch a video that walks through setting up and configuring a Mobile Flows Connector. These components fetch data from integrated backend business systems, and perform the actions requested by the client application.

Note: The video contains no spoken instructions.  Refer to the subtitles for instructions about the installation process.

Logging In to the Workspace ONE UEM Console

To perform most of the steps in this exercise, you must first log in to the Workspace ONE UEM Console.

1. Launch Chrome Browser

Launch Chrome Browser

On your desktop, double-click the Google Chrome icon.

3. Authenticate In to the Workspace ONE UEM Console

  1. Enter your Username. This is the name provided in the activation email.
  2. Enter your Password. This is the password provided in the activation email.
  3. Click the Login button.

Note: If you see a Captcha, be aware that it is case sensitive.

Configuring Mobile Flows Connectors

In this section, watch a video that shows how to configure a Mobile Flows Connector in Workspace ONE UEM Console. This configuration enables connector discovery for the Mobile Flows server, and client applications interactions with backend systems.

Note: The video contains no spoken instructions. Refer to the subtitles for instructions about the installation process.

Publishing VMware Workspace ONE Boxer for Mobile Flows

The previous sections have shown shown how to configure the Workspace ONE Mobile Flows Connector for App Discovery in a series of videos.  This section walks through configuring Workspace ONE Boxer to leverage Mobile Flows in the Workspace ONE UEM Console.

1. Add a Public Application

Add a New Public Application
  1. Click Add.
  2. Select Public Application.

2. Define Search Parameters

  1. Select Apple iOS from the Platform drop-down.
  2. Enter Workspace ONE Boxer in the Name field.
  3. Click Next.

3. Select VMware Workspace ONE Boxer

Click Select next to the Workspace ONE Boxer application.

4. Save and Assign

Click Save & Assign.

5. Add Assignment

Click + Add Assignment.

6. Configure Assignment Settings

  1. Click in the Selected Assignment Groups field. This will pop-up the list of created Assignment Groups. Enter All Devices and select All Devices (Organization Group).
  2. Select Auto for the App Delivery Method.

7. Configure Email Settings

  1. Scroll to the Email Settings section.
  2. Enter the Account Name, for example, HOL Email.
  3. Enter the Exchange ActiveSync Host, for example, https://sme.airwlab.com.
  4. Enter the Domain, for example, hol.
  5. Enter the lookup value {UserPrincipalName} for the User.
  6. Enter the lookup value {EmailAddress} for the Email Address.

8. Configure Application Policies

  1. Scroll down to the Policies section.
  2. Select Enabled for Device must be MDM Managed to install this App.
  3. Select Enabled for Remove on Unenroll.
  4. Select Enabled for Prevent Application Backup.

9. Enter Application Configurations

  1. Scroll down to Application Configuration (Optional).
  2. Use the values in the table to enter the Configuration Key, select the Value Type, and enter Configuration Value.
  3. Click Add to add the next row.
  4. Add all of the values in the table:
Configuration Key
Value Type Configuration Value

 AppMobileFlowsEnabled 

Boolean True

AppMobileFlowsHost

String https://prod.hero.vmwservices.com
AppMobileFlowsvIDM 
String
https://hol-cn1193-intelligence.vidmpreview.com
AppMobileFlowsSyncTimeHours 
Integer 1
AppMobileFlowsAutoEnableConnectors
Boolean True

10. Add the Assignment

Click Add.

11. Review Assignment and Save

  1. Confirm that the configured assignment displays.
  2. Click Save & Publish.

12. Review and Publish

Click Publish.

Publishing Coupa On-Demand

In this section, publish add Coupa as a public, iOS application that publishes on-demand. This exercise enables a hero-card to display for Coupa in VMware Workspace ONE® Web.

1. Add a Public Application

Add a New Public Application
  1. Click Add.
  2. Select Public Application.

2. Define Search Parameters

  1. Select Apple iOS from the Platform drop-down.
  2. Enter Coupa in the Name field.
  3. Click Next.

3. Select Coupa

Click Select next to the Coupa application.

4. Save and Assign

Click Save & Assign.

5. Add Assignment

Click + Add Assignment.

6. Configure Assignment Settings

  1. Click in the Selected Assignment Groups field. This will pop-up the list of created Assignment Groups. Enter All Devices and select All Devices (Organization Group).
  2. Select On-Demand for the App Delivery Method.

7. Add the Assignment

Review the default configurations in the Policies section, and click Add.

8. Review Assignment & Save

  1. Confirm that the configured assignment displays.
  2. Click Save & Publish.

9. Review and Publish

Click Publish.

Validating Coupa App Assignment

In order for a Coupa Hero Card to populate in Workspace ONE Web, Coupa must be assigned to the device in the on-demand deployment mode. In this section, log in to the Workspace ONE app, and verify that Coupa appears in the Catalog.

1. Launch Workspace ONE App

Tap on the icon to launch the Workspace ONE App.

2. Select Your Domain

  1. Select the domain, for example, hol.
  2. Tap Next.

3. Enter Credentials

  1. Enter the Username, for example, yourid.
  2. Enter the Password, for example, VMware1!.
  3. Tap Sign in.

4. Open the Catalog

You will see a series of screens updating the progress on building your workspace.  When the process is complete, tap Enter.

5. Accept Push Notifications

Tap Allow when prompted to accept push notifications from Workspace ONE.

6. Validate Coupa App Assignment

Find the Coupa - Expenses & Approvals app in the Catalog. Do NOT install the application.

7. Return to the Device Spring Board

Click the iOS device's home button to return to the Spring Board.

Enabling Mobile Flows in VMware Workspace ONE Boxer

1. Launch Workspace ONE Boxer

From the iOS device spring board, tap the Boxer icon.

2. Accept the Privacy Prompt

Tap I understand to accept.

3. Agree to Data Sharing

Tap I agree to accept data sharing.

4. Authenticate

  1. Enter the password, for example, VMware1!.
  2. Click Get Started.

5. Accept Workspace ONE Boxer Prompts

If you see prompts for Contacts and Push Notifications, tap OK to accept.

6. Open Settings

After Workspace ONE Boxer opens, tap the Settings option on the bottom menu.

7. Open Advanced Settings

  1. Scroll down to the section labeled MORE.
  2. Tap Advanced.

8. Open Mobile Flows Settings

Under ENABLED FEATURES, tap Mobile Flows.

9. Enable Mobile Flows

Use the slider to Enable Mobile Flows.

10. Select the Domain

  1. Select the domain, for example, hol.
  2. Tap Next.

11. Enter Credentials

  1. Enter Your sAMAccountName.
  2. Enter the password, for example, VMware1!.
  3. Tap Sign in.

12. Validate that Mobile Flows and Connector are enabled

Validate that Mobile Flows and Workspace ONE App Discovery connector are enabled.

Experiencing Mobile Flows

In this section, compose an email in Workspace ONE Boxer that contains a keyword. Then, observe how Workspace ONE Boxer detects the keyword, and triggers the Workspace ONE App Discovery Connector.

1. Open Mail

In Workspace ONE Boxer, on the bottom toolbar, tap Mail.

2. Open a New Email

On the top left, tap on the Edit icon to compose a new email.

3. Compose Email

Compose a simple email that contains the keyword for the Coupa app:

  1. Enter your email address.
  2. Enter Travel as the Subject.
  3. Enter Travel as the Body.
  4. Tap the Send icon.

4. Validate the Hero Card

  1. After about 10 seconds, verify that a Hero Card to install the Coupa application appeared.
  2. Tap Install to proceed with the installation.

5. Accept Application Installation

Click Install to proceed with the Coupa app installation.

6. Validate the Application Installed

Press the Home button on the iOS device, and verify the Coupa application appears on the device Spring Board.