Full guide for admin
Table of Contents
- Objective
- Quick Installation guide
- Requirements
- Step 1. Register an environment
- Step 2. Set up Single Sign-On
- Step 3. Configure SharePoint & File server(s)
- Step 4. Configure Email/Exchange
- Step 5. User & Group management
- Step 6. App store
- Step 7. Configure Remote Desktop & Local apps
- Step 8. Create a Role-Based Workspace/template
- Step 9. Branding
Objective
If you follow this guide thoroughly, you can design a Workspace with the elements portrayed in the example and create a awesome Workspace!
Quick installation guide
Requirements
Before you start with the configuration of Workspace 365, a Global Administrator must first be created in Office 365. If there already is an Office 365 environment with a Global Administrator, please use this user account during the process. For more information on the Workspace 365 requirements, click here.
Step 1. Register an environment
With Workspace, you are able to register multiple environments for multiple customers.
Binding an Office 365 tenant to a Workspace 365 environment is the first step when setting up the Workspace. Each environment must be created with a Global Admin of the corresponding Office 365 tenant. After creation of the Workspace using the Powershell script, you will be presented with the URL. Navigate to the URL. After logging in, you will be prompted to set up Single Sign-On.
You can even add a custom URL to redirect your customer environment, e.g. "/tenant X", to that same customer domain X. For this, you can submit a Change Request.
Multiple Workspace 365 environments can be linked to one Office 365 tenant and a single Workspace 365 environment can be linked to one Office 365 tenant. You can not link multiple Office 365 tenants to one Workspace 365 environment.
Step 2. Set up Single Sign-On
Workspace 365/Office 365 administrators are able to enable Single Sign-On (SSO) for their Workspace 365 environment, which helps to decrease login procedures for Workspace 365 users. The recommended setup for Single Sign On is oAuth2.
oAuth2 is an open standard for authorization, commonly used as a way for internet users to log in to third-party websites using their Microsoft, Google, Facebook, etc. accounts without exposing their password. Generally, oAuth2 provides clients with "secure delegated access" to server resources on behalf of a resource owner.
With configuration of oAuth2 in Workspace 365, you can sign in to Workspace 365 via your current federation and you are able to use MFA, also called 2 Factor Authentication (2FA) or Multi-factor Authentication (MFA).
To set up Single Sign-On automatically, choose the "Automatic setup". Workspace 365 will create an Azure AD application with the permissions for integrations you will grant, such as Exchange or SharePoint.
Step 3. Configure SharePoint & File server(s)
SharePoint
After you have configured Single Sign-On, you can enter the Workspace. The Welcome wizard will ask you to configure Exchange and SharePoint. If you have Office365/Exchange Online you don't have to configure anything.
Sometimes your SharePoint URL cannot be detected. In that case, you can fill it in afterwards. Additional configuration for SharePoint can be done under the Workspace Settings -> Integrations -> SharePoint documents.
Read our blog about the importance of a good folder structure.
File server
You can also choose to set up File server(s) in combination with SharePoint, or to use it as the only document source.
To set up the file server, go to the Workspace Settings -> Integrations -> File servers. Make sure that the file server is accessible via WebDAV SSL.
Having issues with the setup/configuration, or are for example SP sites missing in Workspace? Click here for information on troubleshooting the file server & SharePoint.
Step 4. Configure Email/Exchange
During the Welcome wizard, you can configure Email/Exchange Online. It is also possible to configure Exchange On-Premises. In that case, you need to configure the Exchange server URL and provide the user credentials to access the mailboxes.
Step 5. User & Group management
After setting up Workspace, it is time to create users or import users. Your options are:
- Create users manually in Workspace.
- Import users from Office 365 (groups).
- Automate user import by using our Azure AD synctool.
When you import users from Office 365 (groups), keep in mind that the imported users will be notified via email that their Workspace is ready to use.
Azure AD synctool
This tool will move the Identity Management from Workspace 365 to Azure AD and sync your users automatically to Workspace. You can choose to sync all users or selected domains and/or groups to Workspace.
Step 6. App store
Once your user (groups) are in place, you can configure/create applications from the App store and assign them to your users to create the best Role-Based Workspace, just within a few clicks.
Step 7. Configure Remote Desktop & Local apps
You can access remote applications from any device, using our Clientless RDP solution. We have also created a direct integration with Azure Virtual Desktop (AVD) and Workspace 365, this means that you can start AVD apps directly from your Workspace.
All the applications are available without an extra required login. Although, you can choose to set MFA for these applications for extra security.
Local apps are only accessible via Workspace on the device on which they are installed.
Step 8. Create a Role-Based Workspace/template
It is important to learn how to set up a Workspace 365 template. This will allow you to set up the Workspaces of new users within seconds. As an administrator, you can save a template of your current Workspace. This means that the template is updated with all of the Personal app groups that the administrator has set in his/her own Workspace.
Step 9. Branding
As an administrator, you can easily brand Workspace 365. You can select the colors, logo and even the product name. This will give you, as a partner, the recognition you deserve! Read this article to learn more about Branding of your workspace.
