Full guide for Admin


To use the complete browser-based workspace you’ll need to set it up in order to make use of all the powerful features. To do this we’ll share some articles with you to guide you through the process.

The Guide for Admin contains the following subjects:

Quick Installation Guide

  1. Register an environment
  2. Set up Single Sign-On
  3. Configure SharePoint & Fileserver(s)
  4. Configure Email/Exchange
  5. User and Group management
  6. App store
  7. Configure Remote Desktop & Local apps
  8. Create a Role-Based workspace/template
  9. Branding


If you follow this guide thoroughly, you can design a workspace with the elements portrayed in the example and create a awesome workspace.


Quick installation guide

Note: We've created a handy step by step document. You can use this to make sure you have everything in place before you roll out/register the workspace. You can find the document here.


Note: Before you start with the configuration of Workspace 365, a global administrator must first be created in Office 365. If there is already an Office 365 environment with a global administrator, please use the credentials of this user during the process.
Note: Please temporary disable MFA on the account you're using during provisioning a new tenant. This is because the Powershell modules being used doesn't support MFA. Yep, even app passwords wont work.... When you have setup SSO (step 2) correctly, you can enable it again.

1. Register an Environment

With workspace you are able to register multiple environments for multiple customers.


Binding an Office 365 tenant to a Workspace 365 environment is the first step when setting up the workspace.
Multiple Workspace 365 environments can be linked to one Office 365 tenant and a single Workspace 365 environment can be linked to one Office 365 tenant. You can not link multiple Office 365 tenants to one workspace 365 environment.


Each environment must be created with a global admin of the corresponding Office 365 tenant. Make sure this account has a mailbox enabled. During registration, workspace sends a confirmation e-mail to that account. This global admin account has to remain active in the workspace for workspace to function. For more info on how to register an environment, contact your Workspace 365 Administrator or Submit a request.

Note: Workspace does not change your Azure AD/Office 365 production environment. We integrate Office 365 and Azure AD Services.

After you've received the e-mail, make sure you navigate to the URL listed in the email. Log in with the credentials that are provided to you in the e-mail.

After you have logged in, you will be prompted to set up Single Sign-On.



Back to top


2. Set up Single Sign-On

Workspace 365/Office 365 administrators are able to enable Single Sign-On (SSO) for their Workspace 365 environment, which helps to decrease login procedures for Workspace 365 users. The recommended setup for Single Sign On is oAuth2.

oAuth2 is an open standard for authorization, commonly used as a way for internet users to log in to third-party websites using their Microsoft, Google, Facebook, etc. accounts without exposing their password. Generally, oAuth2 provides clients with "secure delegated access" to server resources on behalf of a resource owner.

With configuration of oAuth2 in Workspace 365, you can sign in to Workspace 365 via your current federation and you are able to use MFA, also called 2 Factor Authentication (2FA) or MultiFactor Authentication (MFA).

To set up Single Sign-On automatically, choose the "Automatic setup". Workspace 365 will create an Azure AD application with the permissions you will grant. By default SharePoint and Exchange are checked. Additionally you can choose to add Power BI permissions to the application.

For more info on how to set up Single Sign-On (oAuth2) we refer you to this article.



Be aware that these permissions are only granted for the administrator in this tenant.
You have to grant it for all users. If you do not "Grant Permissions" you will receive the following error while trying to log in to the workspace: "Need admin approval".

Back to top


3. Configure SharePoint & Fileserver(s)

After you have configured Single Sign-On, you can start to enter the workspace. The Welcome wizard will ask you to configure Exchange and SharePoint. If you have Office365/Exchange Online you don't have to configure anything.


Sometimes your SharePoint URL cannot be detected. In that case, fill it in manually. Afterwards your SharePoint is configured by the wizard.


You can do additional configuration on the SharePoint and Fileserver(s). Navigate to Settings -> SharePoint documents. Here you can choose to set your settings for SharePoint.


You can also choose to set up Fileserver(s) in combination with SharePoint or as the only document store. Navigate to Settings -> Fileservers. Here you can configure the fileserver URL. Make sure this fileserver is accessible via WebDav SSL.

For more information on how to set up SharePoint and Fileserver(s) click here.


You can also configure to use Online Office apps for the fileserver.

Back to top


4. Configure E-mail/Exchange


During the wizard you can set up Email/Exchange if you have Exchange Online. It is also possible to configure Exchange On-Premises. In that case you need to configure the Exchange EWS URL and provide the user credentials to access the mailboxes.

Click here for more information on how to set up e-mail.

Back to top


5. User and Group management

After you have set up the workspace, it’s time to create or import users. It is possible to import users from Office 365. This can be done very easily by Importing users from Office 365. Keep in mind that the imported users will be notified via email that their workspace is ready to use.


Click here for more information on User Management.


5.1.  Azure AD Sync tool

It is also possible to sync this process and use our Azure Active Directory Sync tool. This tool will move the Identity Management from Workspace 365 to Azure AD. This Sync tool will also sync all the selected groups as a group to the workspace, so you can assign permissions or roles based on your Azure AD Security Groups.

Click here for more information on the Azure AD Sync tool.

Back to top


6. App Store

Everything you need to know to create the best Role-Based workspace within a few clicks.

After importing users and setting up Apps, it is important to offer these Apps to the users in an efficient way. Also, permissions for usage of certain Apps have to be set before they can be used.

Click here for more information on App store and take a look at Shared App Groups

Back to top


7. Configure Remote Desktop & Local apps

If users still need a Legacy Application it’s possible to integrate it in different ways by using our Clientless RDP solution, which will connect to your Remote Apps or Remote Desktop. Local apps are only accessible via workspace on the device on which they are installed.

Check these articles for how to configure Clientless RDP & Citrix.
To set up Local Apps, follow these steps Launching Local applications from the workspace.

Back to top


8. Create a Role-Based workspace/template

It is important to learn how to set up a Workspace 365 template. This will allow you to set up the workspaces of new users within seconds. As an Administrator, you can save a template of your current workspace. This means that the template is updated with all of the Personal App Groups that the Administrator has set in his own workspace.


For more information on templates click here.

Back to top

9. Branding

As an Administrator you are able to easily brand Workspace 365. You can select the colors, logo and even the product name. This will give you, as a partner, the recognition you deserve! After completing the steps in the document, you will be able to change the Branding of your workspace.

  1. You can create a branding name.
  2. You can create a workspace name (Product Name).
  3. Change the colors used in the workspace (Header Color & Primary Color).
  4. Implement the logos of your choice (Workspace logo & Sign in logo and Home logo.
    (The sign in logo is not visible when using single sign-on type OAuth2)
  5. Create solid content for the support page (Support information).
  6. You can add groups and/or users.


Back to top