Many of us in the consulting game are starting to look more closely at Mobile Flows. If we think about it logically, Mobile Flows are the next generation of Microsoft Flow which has been renamed Power Automate. Mobile Flows introduces some challenges, such as OOTB (out of the box) connectors limitations, setting up ServiceNow catalog request approvals, along with a new little demo of things.

Configuring Workspace ONE Access and Intelligent Hub for Mobile Flows

Configuring Workspace ONE Access Templates

The setup is relatively easy with just a few basic steps. You will start by going into Catalog > Settings > Remote App Access > Templates and creating a new Template. You will need to set these settings exactly for it to work:

• Template ID: MobileFlows_Server_Template
• Scope: Email, Profile, User, OpenID
• Redirect URI: https://prod.hero.vmwservices.com/token-exchange/oauth2/callback
• Modify the Token Lifetimes as you desire, but the settings below are my recommendation.

Configuring the Hub Configuration

The Hub Configuration is pretty simple with the assumption you are already using the unified hub and catalog already. You will just need to go into the Notifications > Global Settings section and enable the “Enable Workspace ONE mobile flows” button to turn things on.

Mobile Flows Are Out of the Box!

People are pretty intimidated by mobile flows, but let’s talk about what OOTB connectors are available. The idea is we have certain OOTB connectors that don’t require any development efforts. They have a few requirements: (1) must be run through WS1 Access (which also requires you configure Access correctly), (2) must have proper access to generate Oauth tokens, (3) must run through the Hub or Boxer (depending on the connector). Let’s cover a list of the current mobile flows along with their supported features. One thing to keep in mind is they support VERY specific features, which I explain the notes section.

Connector	Supportability	Notes
Salesforce	Approvals, Catalog, and Hub	Salesforce connector for discount request approval
ServiceNow	Approvals, Catalog, and Hub	ServiceNow connector for requisition request approval
Concur	Approvals, Catalog, and Hub	Concur connector for expense request approval
Coupa	Approvals, Catalog, and Hub	Coupa connector for requisition request approval
Jira Service Desk	Approvals, Catalog, and Hub	Jira Service Desk connector for ticket approval; only appears to work for On-Prem
Microsoft Teams	Notifications, Catalog, and Hub	Microsoft Teams connector for @-mentions notifications; Great article here on setting it up
Microsoft Planner	Notifications, Catalog, and Hub	Microsoft Planner connector for new assigned task notifications
Microsoft OneDrive	Approvals, Catalog, and Hub	Microsoft OneDrive connector for file/folder access approval
LinkedIN Learning	Notifications, Catalog, and Hub	LinkedIn Learning connector for new training notifications
LinkedIN Learning Chatbot	Virtual Assistant, Catalog, and Hub	LinkedIn Learning connector for searching trainings via Hub Assistant
Zoom	Notifications, Catalog, and Hub	Zoom connector for new recording notification
WorkDay	Approvals, Catalog, and Hub	Workday connector for PTO approval
WS1 UEM Chatbot	Virtual Assistant, Catalog, and Hub	UEM connector for syncing devices via Hub Assistant
ServiceNow Chatbot	Virtual Assistant, Catalog, and Hub	ServiceNow connector for creating tickets, viewing tickets, and ordering devices via Hub Assistant
Microsoft Dynamics	Notifications, Catalog, and Hub	Microsoft Dynamics connector for new assigned account notifications
Google Docs	Notifications, Catalog, and Hub	Google Docs connector for @-mentions notifications
Box Notes	Notifications, Catalog, and Hub	Box Notes connector for @-mentions notifications
Salesforce Leads	Notifications, Catalog, and Hub	Salesforce connector for new assigned lead notifications
Concur Travel	Notifications, Catalog, and Hub	Concur connector for travel request approval

Setting up ServiceNow for Mobile Flows

I found that there are a few article about setting up SSO for a ServiceNow development environment like this one here, but they do not properly show you how to setup the SSO part of things. I’m going to show you the exact settings for setting up SSO on both the ServiceNow side and the Access side to ensure you are rock solid.

Setting up SSO inside ServiceNow

The first part is installing the right module in ServiceNow. You do this easily by going into System Applications and search for “Multiple Provider Single Sign-On Installer” and install that module.

Once that module is installed, you can go into “Identity Providers” and set it up. Let’s check out a short video on configuring the SAML provider inside of ServiceNow.

Setting up SSO inside WS1 Access

Once you finish that, we just need to configure the application inside of WS1 Access. That is a quick and simple thing that will be done easily if you know the right settings.

As I mentioned, once that is done you simply do a “Test Connection” and then “Activate” to enable the SAML integration. One item that many people may forget is to check the “Default Box”

The final portion is to go into your properties section and configure them like you see below. Once done, you are now 100% and ready to log into ServiceNow using Workspace ONE Access as an Identity Provider!

Adding ServiceNow Mobile Flows Inside of Workspace ONE

We will now cover a full demo that shows you both sides of the house. Firstly, we will show you how to create the OAuth token followed by adding the application inside of WS1 UEM.

The Mobile Flows Experience Comes Together

Let’s check out a short demo on how you opt into Mobile Flows. I choose to use the Catalog portal for WS1 Access because I’ve found that some of the opt-in doesn’t quite work otherwise. That’s sort of how it goes sometimes. We will take a look at that and what our finished product looks like. It’s certainly compelling.

Final Thoughts

In the consulting world, you look for things that “pop” and “excite.” VMware has created something that makes even the most stoic executive giggle with excitement. Leveraging their partnership with IBM Watson, their virtual assistant and mobile flows tells an amazing story. As much as Intune excites people with it’s cost efficiencies and simplicity discussed a few months ago here, they cannot offer something as compelling as mobile flows and virtual assistant. Say what you will, VMware has done a masterful job of taking the basics of Microsoft that are household names like Microsoft Flows and Autopilot and taken them up a notch or three.