Skip to main content

Connect Workspace One to Anzenna

Integrate Anzenna with VMware Workspace One UEM to monitor device management, application deployment, and security compliance across all endpoint types.

Prerequisites

  • Workspace One UEM administrator access
  • Anzenna account
  • Ability to create OAuth clients in Workspace One

Overview

The integration provides:

  • Multi-platform device inventory
  • Application management visibility
  • Compliance policy monitoring
  • Security posture assessment
  • User assignment tracking

Step-by-Step Instructions

Part 1: Access REST API Settings

  1. Log into your Workspace One UEM console

  2. Navigate to Groups & Settings

  3. Select All Settings

  4. Click on System

  5. Select Advanced

  6. Click on API

  7. Select REST API

Part 2: Copy REST API URL

  1. Copy the REST API URL displayed

Format: https://your-instance.awmdm.com/api

  • Save this URL - you'll need it later for Anzenna

  • Click Close to exit the API information dialog

Part 3: Create OAuth Client

  1. From the main navigation, go to Configurations

  2. Scroll down and locate OAuth Client Management

  3. Click OAuth Client Management

  4. Click ADD to create a new OAuth client

Part 4: Configure OAuth Client

  1. Enter client details:

    • Name:Anzenna
    • Description:Anzenna Client Credentials
  2. Select the appropriate Organization Group

  3. Under Role, select Read Only

  4. Click SAVE to create the OAuth client

Organization Group

Choose the OG that covers all devices you want to monitor. Higher-level OGs provide broader access.

Part 5: Copy Credentials

  1. After creation, a dialog displays the credentials

  2. Copy the Client ID
  3. Copy the Client Secret
Important

Save both values immediately. The Client Secret cannot be retrieved later.

  1. Click Close after copying the credentials

Part 6: Connect in Anzenna

  1. Log into Anzenna at

    app.anzenna.ai

  2. Navigate to Settings > Integrations

  3. Find the Workspace One integration card

  4. Toggle the switch to enable the integration

  5. Enter the Client ID in the designated field

  6. Paste the Client Secret into the secret field

  7. Enter the REST API URL you copied earlier:

    https://your-instance.awmdm.com/api

  8. Click Save to establish the connection

  9. Verify the integration shows as Connected

Verification

  1. Check integration status shows Connected

  2. Wait 15-30 minutes for initial sync
  3. Navigate to Devices dashboard in Anzenna

  4. Verify Workspace One devices are appearing

  5. Check device details and compliance status

What Data is Collected

Device Inventory

  • Windows devices
  • macOS devices
  • iOS and iPadOS devices
  • Android devices
  • Chrome OS devices

Device Details

  • Serial numbers
  • Model information
  • OS versions
  • Enrollment status
  • Last seen timestamps

Compliance Status

  • Policy compliance
  • Security settings
  • Certificate status
  • Profile deployment
  • Encryption status

Application Data

  • Installed applications
  • Managed app status
  • Application versions
  • Assignment status

User Information

  • Assigned users
  • User groups
  • Email addresses
  • Department information

Organization Groups

Workspace One uses Organization Groups (OGs) for hierarchy:

  • Parent OGs - Inherit settings to child OGs

  • Child OGs - Specific departments or locations

  • Access scope - OAuth client access determined by assigned OG

Choose the appropriate OG level based on monitoring scope needed.

Troubleshooting

Connection Fails

  • Verify Client ID and Secret are correct
  • Check REST API URL format (include /api)

  • Ensure OAuth client is active
  • Confirm Read Only role is assigned

No Devices Appearing

  • Wait 30 minutes for initial sync
  • Verify OAuth client OG covers target devices

  • Check devices are enrolled and online
  • Ensure Read Only role has device access
  • Review Workspace One audit logs

API URL Errors

  • Verify URL includes /api path

  • Check no extra characters or spaces
  • Ensure HTTPS protocol
  • Confirm URL matches your tenant
  • Test URL accessibility

Permission Errors

  • Verify Read Only role is assigned
  • Check OG assignment is correct
  • Ensure no conflicting roles
  • Review API access settings in Workspace One

Security Considerations

  • OAuth 2.0 - Industry-standard authentication

  • Read-only access - Cannot modify configurations

  • Client credentials - Secure credential storage

  • Organization scope - Limited to assigned OG

  • Audit logging - All API access logged

Best Practices

  1. Choose appropriate OG — Balance scope vs. security

  2. Document credentials — Store in password manager

  3. Test in sandbox — Verify before production

  4. Monitor initially — Check for errors in first week

  5. Regular reviews — Audit quarterly

  6. Update documentation — Record OG and access scope

  7. Credential rotation — Plan annual updates

Integration Maintenance

Regular Checks

Perform monthly:

  • Verify connection status
  • Check data sync freshness
  • Review sync timestamps
  • Test sample device queries

Credential Management

Best practices:

  • Store in secure vault
  • Document OG assignment
  • Set calendar reminders for reviews
  • Have backup access plan

OAuth Client Updates

  1. Edit client in Workspace One
  2. Update credentials if regenerated
  3. Test connection thoroughly
  4. Update documentation

Organization Group Changes

  1. Review OAuth client OG assignment
  2. Verify access scope is still appropriate
  3. Test device visibility
  4. Update documentation

Workspace One Editions

The integration works with:

  • Workspace One UEM - Full endpoint management

  • Workspace One Intelligence - Enhanced analytics (provides additional insights)

  • Workspace One Access - Identity integration

All editions support REST API and OAuth clients.

API Rate Limits

Workspace One enforces API rate limits:

  • Limits vary by edition and tenant
  • Anzenna automatically handles throttling
  • Monitor usage in Workspace One console
  • Contact VMware if limits are consistently reached


Need help? Contact

Anzenna Support

for assistance.