Hi ,
Welcome to the Support Portal. How can we help?
Follow

Full guide for admin

Table of Contents

 

Objective

To use the complete browser-based Workspace you’ll need to set it up in order to make use of all the powerful features. To do this we’ll share some articles with you to guide you through the process.
If you follow this guide thoroughly, you can design a Workspace with the elements portrayed in the example and create a awesome Workspace.

admin_guide_workspace.png


Quick installation guide

We created a handy step-by-step document. You can use this to make sure you have everything in place before you roll out/register the Workspace. You can find the document here.


Requirements

Before you start with the configuration of Workspace 365, a global administrator must first be created in Office 365. If there is already an Office 365 environment with a global administrator, please use the credentials of this user during the process. More information on further requirements, click here


Step 1. Register an environment

With Workspace you are able to register multiple environments for multiple customers.

mceclip4.png

New tenants can be created via API or using the PowerShell script

Binding an Office 365 tenant to a Workspace 365 environment is the first step when setting up the Workspace. You can even add a custom URL to redirect your customer environment, e.g. "/tenant X", to that same customer domain X. For this, we charge a one-time fee. Check out our Partner Pricing page for more information.
Multiple Workspace 365 environments can be linked to one Office 365 tenant and a single Workspace 365 environment can be linked to one Office 365 tenant. You can not link multiple Office 365 tenants to one Workspace 365 environment.

mceclip2.png

Each environment must be created with a global admin of the corresponding Office 365 tenant. For more information on how to register an environment, contact your Workspace 365 administrator or Submit a request.

Workspace does not change your Azure AD/Office 365 production environment. We integrate Office 365 and Azure AD Services.

After creation of the Workspace via e.g. the Powershell script, you'll be presented with the URL. Navigate to the URL. After you have logged in, you will be prompted to set up Single Sign-On.

mceclip4.png

Back to top

 

Step 2. Set up Single Sign-On

Workspace 365/Office 365 administrators are able to enable Single Sign-On (SSO) for their Workspace 365 environment, which helps to decrease login procedures for Workspace 365 users. The recommended setup for Single Sign On is oAuth2.

oAuth2 is an open standard for authorization, commonly used as a way for internet users to log in to third-party websites using their Microsoft, Google, Facebook, etc. accounts without exposing their password. Generally, oAuth2 provides clients with "secure delegated access" to server resources on behalf of a resource owner.

With configuration of oAuth2 in Workspace 365, you can sign in to Workspace 365 via your current federation and you are able to use MFA, also called 2 Factor Authentication (2FA) or MultiFactor Authentication (MFA).

To set up Single Sign-On automatically, choose the "Automatic setup". Workspace 365 will create an Azure AD application with the permissions you will grant. By default SharePoint and Exchange are checked. Additionally you can choose to add Power BI permissions to the application.

For more info on how to set up Single Sign-On (oAuth2) we refer you to this article.

mceclip5.png

 

Be aware that these permissions are only granted for the administrator in this tenant.
You have to grant it for all users. If you do not "Grant Permissions" you will receive the following error while trying to log in to the Workspace: "Need admin approval".

Back to top

 

Step 3. Configure SharePoint & File server(s)

After you have configured Single Sign-On, you can start to enter the Workspace. The Welcome wizard will ask you to configure Exchange and SharePoint. If you have Office365/Exchange Online you don't have to configure anything.

mceclip0.png

Sometimes your SharePoint URL cannot be detected. In that case, fill it in manually. Afterwards your SharePoint is configured by the wizard.

mceclip1.png

You can do additional configuration on the SharePoint and File server(s). Navigate to Settings -> SharePoint documents. Here you can choose to set your settings for SharePoint.

mceclip6.png

You can also choose to set up File server(s) in combination with SharePoint or as the only document store. Navigate to Settings -> File servers. Here you can configure the file server URL. Make sure this file server is accessible via WebDAV SSL.

For more information on how to set up SharePoint and File server(s) click here.

mceclip7.png

You can also configure to use Online Office apps for the file server.

Back to top

 

Step 4. Configure Email/Exchange

mceclip0.png

During the wizard you can set up Email/Exchange if you have Exchange Online. It is also possible to configure Exchange On-Premises. In that case you need to configure the Exchange EWS URL and provide the user credentials to access the mailboxes.

Click here for more information on how to set up email.

Back to top


Step 5. User & Group management

After you have set up the Workspace, it’s time to create or import users. It is possible to import users from Office 365. This can be done very easily by Importing users from Office 365. Keep in mind that the imported users will be notified via email that their Workspace is ready to use.

mceclip8.png

Click here for more information on User Management.

 

Azure AD synctool

It is also possible to sync this process and use our Azure Active Directory synctool. This tool will move the Identity Management from Workspace 365 to Azure AD. This synctool will also sync all the selected groups as a group to the Workspace, so you can assign permissions or roles based on your Azure AD Security Groups.

Click here for more information on the Azure AD synctool.

Back to top


Step 6. App store

Everything you need to know to create the best Role-Based Workspace within a few clicks.

After importing users and setting up Apps, it is important to offer these Apps to the users in an efficient way. Also, permissions for usage of certain Apps have to be set before they can be used.

Click here for more information on App store and take a look at Shared app groups

Back to top

 

Step 7. Configure Remote Desktop & Local apps

If users still need a Legacy Application it’s possible to integrate it in different ways by using our Clientless RDP solution, which will connect to your Remote Apps or Remote Desktop. Local apps are only accessible via Workspace on the device on which they are installed.

Check these articles for how to configure Clientless RDP & Citrix.
To set up Local Apps, follow these steps Launching Local applications from the Workspace.

Back to top

 

Step 8. Create a Role-Based Workspace/template

It is important to learn how to set up a Workspace 365 template. This will allow you to set up the Workspaces of new users within seconds. As an administrator, you can save a template of your current Workspace. This means that the template is updated with all of the Personal app groups that the administrator has set in his own Workspace.

mceclip11.png

For more information on templates click here.

Back to top


Step 9. Branding

As an administrator you are able to easily brand Workspace 365. You can select the colors, logo and even the product name. This will give you, as a partner, the recognition you deserve! After completing the steps in the document, you will be able to change the Branding of your workspace.

  1. You can create a branding name.
  2. You can create a Workspace name (Product Name).
  3. Change the colors used in the Workspace (Header Color & Primary Color).
  4. Implement the logos of your choice (Workspace logo & Sign in logo and Home logo.
    (The sign in logo is not visible when using single sign-on type OAuth2)
  5. Create solid content for the support page (Support information).
  6. You can add groups and/or users.

mceclip10.png

Back to top