Full guide for Admin
To use the complete browser-based workspace you’ll need to set it up in order to make use of all the powerful features. To do this we’ll share some articles with you to guide you through the process.
The Guide for Admin contains the following subjects:
Objective
Quick Installation Guide
Requirements
- Register an environment
- Set up Single Sign-On
- Configure SharePoint & Fileserver(s)
- Configure Email/Exchange
- User and Group management
- App store
- Configure Remote Desktop & Local apps
- Create a Role-Based workspace/template
- Branding
Objective
Quick installation guide
Requirements
1. Register an Environment
With workspace you are able to register multiple environments for multiple customers.
Binding an Office 365 tenant to a Workspace 365 environment is the first step when setting up the workspace.
Multiple Workspace 365 environments can be linked to one Office 365 tenant and a single Workspace 365 environment can be linked to one Office 365 tenant. You can not link multiple Office 365 tenants to one workspace 365 environment.
Each environment must be created with a global admin of the corresponding Office 365 tenant. Make sure this account has a mailbox enabled. During registration, workspace sends a confirmation e-mail to that account. This global admin account has to remain active in the workspace for workspace to function. For more info on how to register an environment, contact your Workspace 365 Administrator or Submit a request.
After you've received the e-mail, make sure you navigate to the URL listed in the email. Log in with the credentials that are provided to you in the e-mail.
After you have logged in, you will be prompted to set up Single Sign-On.
2. Set up Single Sign-On
Workspace 365/Office 365 administrators are able to enable Single Sign-On (SSO) for their Workspace 365 environment, which helps to decrease login procedures for Workspace 365 users. The recommended setup for Single Sign On is oAuth2.
oAuth2 is an open standard for authorization, commonly used as a way for internet users to log in to third-party websites using their Microsoft, Google, Facebook, etc. accounts without exposing their password. Generally, oAuth2 provides clients with "secure delegated access" to server resources on behalf of a resource owner.
With configuration of oAuth2 in Workspace 365, you can sign in to Workspace 365 via your current federation and you are able to use MFA, also called 2 Factor Authentication (2FA) or MultiFactor Authentication (MFA).
To set up Single Sign-On automatically, choose the "Automatic setup". Workspace 365 will create an Azure AD application with the permissions you will grant. By default SharePoint and Exchange are checked. Additionally you can choose to add Power BI permissions to the application.
Be aware that these permissions are only granted for the administrator in this tenant.
You have to grant it for all users. If you do not "Grant Permissions" you will receive the following error while trying to log in to the workspace: "Need admin approval".
3. Configure SharePoint & Fileserver(s)
After you have configured Single Sign-On, you can start to enter the workspace. The Welcome wizard will ask you to configure Exchange and SharePoint. If you have Office365/Exchange Online you don't have to configure anything.
Sometimes your SharePoint URL cannot be detected. In that case, fill it in manually. Afterwards your SharePoint is configured by the wizard.
You can do additional configuration on the SharePoint and Fileserver(s). Navigate to Settings -> SharePoint documents. Here you can choose to set your settings for SharePoint.
You can also choose to set up Fileserver(s) in combination with SharePoint or as the only document store. Navigate to Settings -> Fileservers. Here you can configure the fileserver URL. Make sure this fileserver is accessible via WebDav SSL.
4. Configure E-mail/Exchange
During the wizard you can set up Email/Exchange if you have Exchange Online. It is also possible to configure Exchange On-Premises. In that case you need to configure the Exchange EWS URL and provide the user credentials to access the mailboxes.
5. User and Group management
After you have set up the workspace, it’s time to create or import users. It is possible to import users from Office 365. This can be done very easily by Importing users from Office 365. Keep in mind that the imported users will be notified via email that their workspace is ready to use.
5.1. Azure AD Sync tool
It is also possible to sync this process and use our Azure Active Directory Sync tool. This tool will move the Identity Management from Workspace 365 to Azure AD. This Sync tool will also sync all the selected groups as a group to the workspace, so you can assign permissions or roles based on your Azure AD Security Groups.
6. App Store
Everything you need to know to create the best Role-Based workspace within a few clicks.
After importing users and setting up Apps, it is important to offer these Apps to the users in an efficient way. Also, permissions for usage of certain Apps have to be set before they can be used.
7. Configure Remote Desktop & Local apps
If users still need a Legacy Application it’s possible to integrate it in different ways by using our Clientless RDP solution, which will connect to your Remote Apps or Remote Desktop. Local apps are only accessible via workspace on the device on which they are installed.
To set up Local Apps, follow these steps Launching Local applications from the workspace.
8. Create a Role-Based workspace/template
It is important to learn how to set up a Workspace 365 template. This will allow you to set up the workspaces of new users within seconds. As an Administrator, you can save a template of your current workspace. This means that the template is updated with all of the Personal App Groups that the Administrator has set in his own workspace.
9. Branding
As an Administrator you are able to easily brand Workspace 365. You can select the colors, logo and even the product name. This will give you, as a partner, the recognition you deserve! After completing the steps in the document, you will be able to change the Branding of your workspace.
- You can create a branding name.
- You can create a workspace name (Product Name).
- Change the colors used in the workspace (Header Color & Primary Color).
- Implement the logos of your choice (Workspace logo & Sign in logo and Home logo.
(The sign in logo is not visible when using single sign-on type OAuth2) - Create solid content for the support page (Support information).
- You can add groups and/or users.
