Workspace ONE Tunnel on iOS now supports Session Authentication with SAML (Managed Mode)

To facilitate user-interactive authentication for Tunnel in addition to the existing certificate-based authentication, Session Authentication with SAML for the iOS Tunnel client in Managed mode is introduced. This leverages your enterprise Identity Provider where you may also configure additional entitlement restrictions and Conditional Access policies.

With this, Tunnel is now support MFA which are the existing certificated-based authentication plus the IDP session authentication. This allows us to further add an enterprise 2FA protection to tunnel access.

https://airwatchhk.wixsite.com/euc852/post/wso-access-with-rfc-6238-totp-2fa-app

Requirements for Workspace ONE Tunnel for iOS:

·         23.01.1 (Now in Beta)

Requirements for Session Authentication with SAML:

·         iOS 14+, iPadOS 14+

·         Workspace ONE UEM 2302 or later

·         UAG 2303 or later

Requirements to test their existing use-cases with this new client version

• iOS 14+, iPadOS 14+• Workspace ONE UEM 2109 or later

Here are the steps to setup SAML with Workspace ONE Access or Azure.

The new version of Tunnel client is also optimized for better battery consumption.

Reference:

https://beta-ea.vmware.com/project/article/item.html?cap=d39c4bdde3ec45e69f1b944e5765868a&arttypeid={fb7449d2-31a0-47f8-8a79-453e3bb91905}&artid={E3141084-E19F-4351-A81E-C771AEE47F73}

https://beta-ea.vmware.com/project/article/item.html?cap=d39c4bdde3ec45e69f1b944e5765868a&arttypeid={fb7449d2-31a0-47f8-8a79-453e3bb91905}&artid={C4492493-34E0-4A4E-8B9F-3909BFA33A94}