> ## Documentation Index
> Fetch the complete documentation index at: https://docs.envzero.com/llms.txt
> Use this file to discover all available pages before exploring further.
# VMware Workspace ONE Integration
> Set up VMware Workspace ONE as a SAML 2.0 identity provider for env zero using Workspace ONE Access with the correct ACS URL, entity ID, and attribute mappings.
## Introduction
This guide will detail the various steps required to integrate VMware workspace one as a SAML provider for your env zero organization. The current implementation is used for authentication only, where you define your users in your workspace one account to enable them access to your env zero organization.
**Self-Service Configuration Available**: You can configure SAML SSO directly from your organization settings. See [Self-Service SSO Integration](/guides/sso-integrations/self-service-sso) for an overview, or [Self-Service SAML Setup](/guides/sso-integrations/self-service-saml) for step-by-step instructions.
## Steps
1. Login to your workspace one account and go to the Home tab.
2. Under `Services` you should see `Workspace ONE Access`, click on the `Manage` button.
3. In the `Workspace One Access` go to the `Catalog` tab.
4. Click on the `New` button.
5. Enter under the `name` textbox - env zero
6. Add a description, icon, and select the category of the app, and click on the `Next` button.
7. In the `Authentication Type` choose `SAML 2.0`
8. In the `Configuration` choose manual.
9. In the `Single Sign-on URL` and `Recipient URL` enter the following: `https://login.app.env0.com/login/callback?connection={YOUR_ENV0_ORG_ID}`
10. In the `Application ID` enter the following: `urn:auth0:env0:{YOUR_ENV0_ORG_ID}`
11. `Username Format` should be `Unspecified`
12. `Username Value` should be `${user.userName}`
13. Click on the `Advanced Properties` link.
14. In the `Request Signature` and the `Encryption Certificate` enter the data found in this file [here](https://drive.google.com/file/d/1jz1BgKR5pmWB9WFITpBIczPsytgKXRUt).
15. Under the `Custom Attribute Mapping` section add the following:
| Name | Format | Value |
| :-------- | :----- | :--------------------------------- |
| email | Basic | \${user.email} |
| firstName | Basic | \${user.firstName} |
| lastName | Basic | \${user.lastName} |
| name | Basic | ${user.firstName} ${user.lastName} |
16. Click on the `Next` button.
17. Choose the relevant `Access Policy` and click on the `Next` button.
18. Make sure the summary is correct and click on `Save and Assign`.
19. Assign the relevant users.
20. Go back to the `Catalog` tab.
21. Click on the `Settings` tab.
22. Click on the `SAML Metadata`
23. Download the `Signing Certificate`
24. Close the `Settings` modal, and click on the `env zero` application you have just created.
25. Copy the `Launch URL` and send it to us.
26. Navigate to your env zero organization settings and go to the **SSO** tab.
27. Click on **SAML** and complete the self-service form with:
* Identity Provider Single Sign-on URL (Launch URL)
* X.509 Certificate
## Next steps
* [Self-Service SAML Setup](/guides/sso-integrations/self-service-saml) - Review the general SAML configuration process.
* [Sync Roles & Groups From Your IdP](/guides/sso-integrations/importing-roles-or-groups-from-your-identity-provider) - Import VMware Workspace ONE groups into env zero.
* [Okta Integration](/guides/sso-integrations/okta-integration) - Compare with another supported identity provider.