Many of us in the consulting game are starting to look more closely at Mobile Flows. If we think about it logically, Mobile Flows are the next generation of Microsoft Flow which has been renamed Power Automate. Mobile Flows introduces some challenges, such as OOTB (out of the box) connectors limitations, setting up ServiceNow catalog request approvals, along with a new little demo of things.
Configuring Workspace ONE Access and Intelligent Hub for Mobile Flows
Configuring Workspace ONE Access Templates
The setup is relatively easy with just a few basic steps. You will start by going into Catalog > Settings > Remote App Access > Templates and creating a new Template. You will need to set these settings exactly for it to work:
- Template ID: MobileFlows_Server_Template
- Scope: Email, Profile, User, OpenID
- Redirect URI: https://prod.hero.vmwservices.com/token-exchange/oauth2/callback
- Modify the Token Lifetimes as you desire, but the settings below are my recommendation.
Configuring the Hub Configuration
The Hub Configuration is pretty simple with the assumption you are already using the unified hub and catalog already. You will just need to go into the Notifications > Global Settings section and enable the “Enable Workspace ONE mobile flows” button to turn things on.
Mobile Flows Are Out of the Box!
People are pretty intimidated by mobile flows, but let’s talk about what OOTB connectors are available. The idea is we have certain OOTB connectors that don’t require any development efforts. They have a few requirements: (1) must be run through WS1 Access (which also requires you configure Access correctly), (2) must have proper access to generate Oauth tokens, (3) must run through the Hub or Boxer (depending on the connector). Let’s cover a list of the current mobile flows along with their supported features. One thing to keep in mind is they support VERY specific features, which I explain the notes section.
| Connector | Supportability | Notes |
| Salesforce | Approvals, Catalog, and Hub | Salesforce connector for discount request approval |
| ServiceNow | Approvals, Catalog, and Hub | ServiceNow connector for requisition request approval |
| Concur | Approvals, Catalog, and Hub | Concur connector for expense request approval |
| Coupa | Approvals, Catalog, and Hub | Coupa connector for requisition request approval |
| Jira Service Desk | Approvals, Catalog, and Hub | Jira Service Desk connector for ticket approval; only appears to work for On-Prem |
| Microsoft Teams | Notifications, Catalog, and Hub | Microsoft Teams connector for @-mentions notifications; Great article here on setting it up |
| Microsoft Planner | Notifications, Catalog, and Hub | Microsoft Planner connector for new assigned task notifications |
| Microsoft OneDrive | Approvals, Catalog, and Hub | Microsoft OneDrive connector for file/folder access approval |
| LinkedIN Learning | Notifications, Catalog, and Hub | LinkedIn Learning connector for new training notifications |
| LinkedIN Learning Chatbot | Virtual Assistant, Catalog, and Hub | LinkedIn Learning connector for searching trainings via Hub Assistant |
| Zoom | Notifications, Catalog, and Hub | Zoom connector for new recording notification |
| WorkDay | Approvals, Catalog, and Hub | Workday connector for PTO approval |
| WS1 UEM Chatbot | Virtual Assistant, Catalog, and Hub | UEM connector for syncing devices via Hub Assistant |
| ServiceNow Chatbot | Virtual Assistant, Catalog, and Hub | ServiceNow connector for creating tickets, viewing tickets, and ordering devices via Hub Assistant |
| Microsoft Dynamics | Notifications, Catalog, and Hub | Microsoft Dynamics connector for new assigned account notifications |
| Google Docs | Notifications, Catalog, and Hub | Google Docs connector for @-mentions notifications |
| Box Notes | Notifications, Catalog, and Hub | Box Notes connector for @-mentions notifications |
| Salesforce Leads | Notifications, Catalog, and Hub | Salesforce connector for new assigned lead notifications |
| Concur Travel | Notifications, Catalog, and Hub | Concur connector for travel request approval |
Setting up ServiceNow for Mobile Flows
I found that there are a few article about setting up SSO for a ServiceNow development environment like this one here, but they do not properly show you how to setup the SSO part of things. I’m going to show you the exact settings for setting up SSO on both the ServiceNow side and the Access side to ensure you are rock solid.
Setting up SSO inside ServiceNow
The first part is installing the right module in ServiceNow. You do this easily by going into System Applications and search for “Multiple Provider Single Sign-On Installer” and install that module.
Once that module is installed, you can go into “Identity Providers” and set it up. Let’s check out a short video on configuring the SAML provider inside of ServiceNow.
Setting up SSO inside WS1 Access
Once you finish that, we just need to configure the application inside of WS1 Access. That is a quick and simple thing that will be done easily if you know the right settings.
As I mentioned, once that is done you simply do a “Test Connection” and then “Activate” to enable the SAML integration. One item that many people may forget is to check the “Default Box”
The final portion is to go into your properties section and configure them like you see below. Once done, you are now 100% and ready to log into ServiceNow using Workspace ONE Access as an Identity Provider!
Adding ServiceNow Mobile Flows Inside of Workspace ONE
We will now cover a full demo that shows you both sides of the house. Firstly, we will show you how to create the OAuth token followed by adding the application inside of WS1 UEM.
The Mobile Flows Experience Comes Together
Let’s check out a short demo on how you opt into Mobile Flows. I choose to use the Catalog portal for WS1 Access because I’ve found that some of the opt-in doesn’t quite work otherwise. That’s sort of how it goes sometimes. We will take a look at that and what our finished product looks like. It’s certainly compelling.
Final Thoughts
In the consulting world, you look for things that “pop” and “excite.” VMware has created something that makes even the most stoic executive giggle with excitement. Leveraging their partnership with IBM Watson, their virtual assistant and mobile flows tells an amazing story. As much as Intune excites people with it’s cost efficiencies and simplicity discussed a few months ago here, they cannot offer something as compelling as mobile flows and virtual assistant. Say what you will, VMware has done a masterful job of taking the basics of Microsoft that are household names like Microsoft Flows and Autopilot and taken them up a notch or three.
