VMware Workspace ONE Advanced (VCAP-DTM Design) — Question 35
A security team is implementing VMware Identity Manager to have a central point for authentication to facilitate access to its company's applications. The team would like to have users to authenticate to VMware Identity Manager before being able to connect to a Horizon View Desktop.
What can be done to ensure that users who try to authenticate to the Horizon View Connection brokers are forced to first authenticate to VMware Identity
Manager?
Answer options
- A. Create a SAML authenticator in Horizon View and set it to "Allowed."
- B. Configure View advanced authentication to "Allowed" on the Horizon View Connection broker and create a Kerberos authenticator on VMware Identity Manager.
- C. Configure View authentication to "Not Allowed" on the Horizon View Connection broker and create a Kerberos authenticator on VMware Identity Manager.
- D. Create a SAML authenticator in Horizon View and set it to "Required."
Correct answer: D
Explanation
The correct answer is D because setting the SAML authenticator in Horizon View to 'Required' ensures that all users must authenticate through VMware Identity Manager before accessing Horizon View desktops. Options A and B allow for authentication but do not enforce it as a requirement, while option C disables View authentication, which is not the goal of the security team.