Prerequisites:

1. A UAG installed and running
2. Admin Console login
3. Workspace ONE Access tenant configured and working
4. Workspace ONE Access Super Admin login

Process:

1. Grab your Identity Provider's IDP XML Metadata.
1. Login to the Workspace ONE Access tenant as Super Admin and switch to the Workspace ONE Access Console (i.e. the Workspace ONE Access +Admin UI).
2. Browse to the WEB APPS subsection under the CATALOG drop down menu.
3. Select the SETTINGS button.
4. In the popup SETTINGS window, select SAML METADATA under SAAS APPS.
5. Right-click the "Identity Provider (IdP) metadata" link and click SAVE AS in your browser's context menu and save your IDPs XML metadata file.
6. Close the SETTINGS popup Window.
2. Upload the IDP Metadata file to your UAG
1. Login to your UAG as admin by browsing to your UAG's admin login page (i.e. https://:9443/admin/index.html).
2. Click SELECT under "Configure Manually".
3. Under Identity Bridging, select the gear icon to the right of "Upload Identity Provider Metadata".
1. Enter an Entity ID if desired (not needed).
2. Click SELECT next to IDP Metadata and browse to the IDP Metadata file downloaded in Step 1 and select it to upload.
3. Click SAVE.
3. Enable SAML Login for Admins
1. If not already logged in to your UAG, login to your UAG as admin by browsing to your UAG's admin login page (i.e. https://:9443/admin/index.html).
2. Click SELECT under "Configure Manually".
3. Under Advanced Settings, select the gear icon to the right of "Account Settings".
1. Click SAML Login Configuration.
2. Click to Enable SAML Authentication.
3. Select the drop down for the Identity Provider and select your IDP (which you uploaded the metadata for).
4. Download the SAML Service Provider Metadata.
1. Select DOWNLOAD SAML SERVICE PROVIDER METADATA.
2. Enter the Management NIC FQDN for the External Host Name.
3. Click DOWNLOAD and save the SP Metadata for the UAG Admin Login.
4. Once saved, click CANCEL to close the download window.
5. Click SAVE to save the SAML IDP Settings for Admin Login to the UAG.
   NOTE: The interface will reboot in about 20 seconds.
   If the UI reboots faster than you can create the app within your IDP below, it may come up with an IDP error screen stating something to the effect of "no application found" or similar.
6. Click CLOSE.
4. Create the UAG Admin Console app in the Workspace ONE Access Admin console.
1. If not already logged in to your Workspace ONE Access Admin Console, login to the Workspace ONE Access tenant as Super Admin and switch to the Workspace ONE Access Console (i.e. the Workspace ONE Access +Admin UI).
2. Browse to the WEB APPS subsection under the CATALOG drop down menu.
3. Create the new SaaS app.
1. Click NEW to create a new SaaS app.
2. Type in a Name.
3. If desired, type in a description, upload an icon, and select a desired category.
4. Click NEXT.
5. Ensure SAML 2.0 is selected for Authentication Type and URL/XML is selected for Configuration.
6. Open the UAG Service Provider XML metadata file and copy the entire contents and paste into the URL/XML section.
7. Click NEXT.
8. Click NEXT on the Access Policies window.
9. Click SAVE & ASSIGN on the Summary window.
10. Assign the new SaaS app to the desired users and/or groups.
11. Click SAVE.
5. Test
1. Navigate back to the User Portal on Workspace ONE Access and verify the new app exists. You may need to refresh your browser page or logout/login again.
2. Click on the app to launch the UAG Admin Console and verify you are immediately signed on.