Workspace ONE ® is a digital platform that delivers and manages any app on any device by integrating access control, application management, and unified endpoint management. The platform allows IT to deliver a digital workspace that includes the devices and apps of the business's choice, without sacrificing the security and control that IT professionals need.
Take a look at this introductory demo to see how Workspace ONE can help you.
This section summarizes the features and capabilities of Workspace ONE, and outlines a few examples and use cases of when you would use each one.
With Workspace ONE, end-users can get password-less single sign-on to a catalog that provides them access to virtually any app. This includes mobile apps, web apps, cloud apps, and Windows apps. Once signed in, end-users can self-service select the applications they need to be productive with no IT intervention. As an IT professional, you control the back-end workflow to provide an excellent user experience that doesn’t sacrifice security.
Workspace ONE doesn’t dictate which platforms to deploy in your environment. Our goal is to support any device - even devices that have not yet been invented. From desktop OS’s to mobile OS’s, even wearables, and 3D graphics workstations, we support it. Beyond that, we also know that while some devices are corporate-owned and require IT management throughout their lifecycle, many will be owned by the employees themselves. Workspace ONE puts the choice in employees’ hands for the level of convenience, access, security, and management that makes sense for their work style.
To protect the most sensitive information, Workspace ONE enforces access decisions based on device compliance and identity context. Using our powerful policy engine, you can mix and match inputs to make dynamic decisions on the level of access end-users receive.
Workspace ONE allows IT professionals to automate application distribution and updates on the fly. Whether you’re deploying Windows apps or mobile apps, we automate the application delivery process to allow better security and compliance. With Workspace ONE you can deploy Windows apps to Windows devices in your organization or up-to-date apps to mobile devices, from a single platform that keeps you covered every step of the way.
IT can deploy Workspace ONE in a variety of deployment models, including on-premises, in the cloud, and hybrid with different components deployed on-premises and in the cloud.
Since the purpose of Workspace ONE is to manage secure application delivery to your end-users, you must connect Workspace ONE to an existing directory infrastructure. You can configure Workspace ONE to use Active Directory or other LDAP-based directories, for user synchronization, authentication, and application access.
For the sake of simplicity, we’re going to focus this article on a basic cloud deployment of Workspace ONE. The larger your environment, the more complex the requirements get, so we can’t walk through every detail here. This article is intended just to give you the info you need to understand how some of the elements would fit into your environment at a high level. We can split the architecture into infrastructure and end-user components.
Workspace ONE Components
Workspace ONE UEM (formerly known as AirWatch) provides a unified endpoint management platform that delivers simplified access to enterprise resources, secures corporate data, and enables productivity on any device anywhere in the world. UEM also integrates with public application stores to handle the provisioning of native mobile applications to mobile devices. Workspace ONE UEM provides compliance-checking tools to ensure that remote access devices meet corporate security standards. For Office 365, and our integration with the Office 365 Graph API we can manage the DLP settings across the suite of Office applications to ensure security. 
https://getwsone.com . Once installed, end-users will log in with their Active Directory credentials and see the applications that IT has allowed access to. From a single app, end users can view favorite apps, new apps, recommended apps, and categories all within the Intelligent Hub catalog.
Some applications are marked with Requires Workspace ONE Tunnel. Tunnel sets up a VPN connection and connects corporate apps to corporate resources. For applications that contain sensitive data, enrolling in management is the way to go, since it provides greater security including encryption, data protection, compliance, and removing enterprise applications when a device gets unenrolled.
End-users also get the benefit of mobile SSO, or as some call it, password-less authentication. For iOS, a Kerberos certificate is passed down to the end-user device. Users who are successfully signed into their domain can access their Intelligent Hub catalog apps without additional credential prompts. It’s a win-win for IT and end-users.
Now that you’ve established a solid foundation of what Workspace ONE can do for you, hear directly from the product experts about the top 5 things you should know about Workspace ONE. This tech talk will help you understand how key product features in Workspace ONE will work for you.
Learn more
Check out the Workspace ONE Frequently Asked Questions (FAQs) which provides answers to some of the most common questions.
If you are interested in other projects, see the following introductions:
