VMware Workspace ONE Cloud-Based Reference Architecture

User Experience and Validation

The success of any end-user-computing solution hinges on the quality of the end user’s experience. This can be difficult to measure because user experience can, in some respects, be subjective. You must understand how users will interact with the environment and whether it delivers what they need. Feedback from users should be incorporated into the design—and on an ongoing basis—to ensure that any required changes are made to keep the solution relevant.

  • How do users connect?
  • How do users interact with the interfaces, applications, and other aspects of the solution?
  • Does the workflow address the way users need to work?
  • What does the typical workflow look like for them?
  • Do the client-device capabilities fulfill the use case needs?
  • Does the environment deliver a usable and reliable experience? Consider response time, availability, ease of use, and the ability to customize to individual needs.


One of the aims of VMware Workspace ONE® is to allow access to any application from any device. Using Workspace ONE as the common access mechanism for all resources provides a familiar interface and experience across all devices.

A user’s main working client device should match the requirements for that use case. This does not mean that a user is limited to just that device. It just means that other devices might not have all the functionality needed to deliver the full experience and capabilities.

  • Understand the use cases thoroughly.
  • There is no one perfect endpoint—different uses require different choices.
  • Users will use multiple devices—try to set expectations about differences.
  • Be conscious of possible third-party licensing implications.

When accessing VMware Horizon® virtual desktops and RDSH-published applications, it should be noted that not all clients are equal, and all clients do not have the same capabilities. An iPad might be great for mobility and certain use cases, but might not be suitable if features such as multiple monitors and USB redirection are required.

Workspace ONE User Experience

Workspace ONE provides a consistent end-user experience, regardless of device. Workspace ONE native mobile apps are built using responsive design techniques. The apps implement an HTML5-based user experience wrapped in native APIs for the respective OS on which is the app is deployed. This means that the user experience is the same for every OS, but as native apps, the apps can leverage features specific to each OS.

Figure: Workspace ONE App on Windows 10

User Authentication

Workspace ONE provides simple authentication combined with contextual authentication policies based on factors such as the location of the device and what type of device is being used.

In the example screenshots that follow, two authentication policies have been created. The first is one where the device is internal and where username and password suffice. The second, for external use, is configured to require two-factor authentication.

Figure: Internal Login to Workspace ONE

External access requires two-factor authentication.

Figure: External Login to Workspace ONE

After users log in, they have access to a variety of entitled applications. If users have bookmarked applications, the bookmarked apps appear on the Bookmarks tab. The applications displayed on the tabs depend on the context and capabilities of the device. For example, mobile applications are not displayed if the Workspace ONE catalog is viewed from a laptop.

Figure: Bookmarked Applications in Workspace ONE

Users can use the self-service feature of the catalog to add applications.

Figure: Application Catalog in Workspace ONE

They can also use filters and searches to help find apps both in the catalog and on their own workspace.

Figure: Searching for Applications

Web and SaaS Application Launch

Users can launch different types of applications from within their workspace. Web page links open in new tabs. When launching links to SaaS applications (for example, Workday), single sign-on is used, and the user is automatically authenticated.

Figure: SaaS Application Launch and Single Sign-On

Virtual Desktop and Published-Application Launch

When using VMware Horizon® Cloud Service™ on Microsoft Azure, you can synchronize virtual desktops and published applications with the Workspace ONE catalog. This provides a consistent experience for the user, who now has one place to go for all their applications, regardless of type.

Depending on how the environment is configured, virtual desktops and published applications can be automatically bookmarked for a user. Alternatively, users can search the catalog for resources they have been entitled to and optionally bookmark them if they intend to access the items frequently.

Figure: Horizon Desktops and Published Applications in Workspace ONE

When users launch a published application, an application window opens on their desktop, just as if the Windows-based application were natively installed.

Figure: User Launch of a Horizon Published Application from Workspace ONE

If entitled, users can launch a virtual desktop and single sign-on (SSO) to the desktop. In the example screenshot that follows, the VMware Horizon® HTML Access™ browser-based client is used rather than the VMware Horizon® Client native app.

Figure: Launch of a Horizon Virtual Desktop from Workspace ONE

From within a virtual desktop, users can also SSO to Workspace ONE and access all applications in the catalog.

Figure: Workspace ONE Inside a Horizon Virtual Desktop

User Experience on an iOS Device

On an iOS device, the Workspace ONE app can use the latest technologies from Apple, such as Touch ID, to enable one-touch authentication that uses mobile SSO features. On Windows 10, the native app can use Windows Hello to authenticate using a camera and facial recognition.

The following sequence provides a tour of the basic user experience on an enrolled iPad Pro iOS device. In the following screenshot, the home screen of an enrolled iPad Pro is configured and displays the Workspace ONE Touch ID.

  1. The user launches the Workspace ONE app.
    For the example in the following screenshot, a user could either tap the icon in the top-left part of the screen or use the quick-launch menu at the bottom.

    Figure: Home Screen of iOS Device and Workspace ONE App
  2. If the user has previously authenticated, they will be presented with the option to use Touch ID for Workspace and reauthenticate using their fingerprint.

    Figure:  Touch ID Integrated with iOS SSO
  3. After authentication is complete, the Workspace ONE app opens the Bookmarks tab. This tab allows a user to conveniently locate their favorite and frequently used applications.

    Figure: Bookmarks for Favorite Applications on iOS Device
  4. Selecting the Catalog tab allows a user to see all the available applications.
    • Apps are categorized and include virtual (Horizon desktops and published applications), websites (SaaS applications), and mobile apps.
    • The magnifying glass at the top right can also be used to search for applications.
    • Applications that are frequently used can be bookmarked.

      Figure: Catalog Displaying All Available Applications and Virtual Desktops on an iOS Device
  5. From the Catalog, a user can install mobile apps on their iOS device.

    Figure: Installing Mobile Apps from the Catalog Tab or Search Results
  6. After selecting an app to install, the user is asked to confirm installation. Depending on the source, the application might be pushed to the device, or the user might be redirected to the native app store for the device type.

    Figure: Confirmation Box That Redirects to an App Store
  7. After application installation is complete, the iOS home screen will display the application icon.

    Figure: Native Apps on iOS Home Screen