Product Documentation

To add a Web and SaaS app to XenMobile

Jun 16, 2015

Using the XenMobile console, you can provide users with single sign-on (SSO) to your mobile, enterprise, web, and SaaS apps. You can enable apps for SSO by using application connector templates. For a list of connector types available in XenMobile, see List of Application Connector Types.

You can also you build your own connector in XenMobile.

You configure a connector by providing the following parameters:

  • Different names (optional). Use any app connector displayed in the console. Box connector is no longer supported.
  • Description of the app.
  • Web address by using the fully qualified domain name (FQDN). For example, if you want to add LinkedIn to your app list, you go to and then click Sign in. When the logon page appears, you use the web address, when configuring the app.
  • Location of the app, either on the Internet or in your internal network.
  • Credentials for SSO. Users can use the app credentials.
  • Category for the app. Categories allow you to organize apps in Worx Home.
  • App policies for each app you configure in XenMobile.
  • Workflow approval settings for all apps that include specifying the individuals who can approve the user account.
  • A delivery group of users to which you want to assign the app.

If an app is available for SSO only, when you finish configuring the preceding settings, you save the settings and the app appears on the Apps tab in the XenMobile console.

To add an app connector in XenMobile

  1. In the XenMobile web console, click Configure > Apps. The Apps page opens.
  2. On the Apps page, click Add.

  3. On the Add App page, click Web & SaaS.

  4. On the App Information page, click Choose from existing connector or Create a new connector.

  5. If you click an app in the list, the Details page opens. The App name, Description, and URL are pre-populated.

    1. In URL, if applicable, type the Web address of the app or keep the default address.
    2. In App is hosted in internal network, click ON if the app is running on a server in your internal network. If users connect from a remote location to the internal app, they must connect through NetScaler Gateway. Setting this option to ON adds the VPN keyword to the app and allows users to connect through NetScaler Gateway.
    3. In the App category list, click a category.
    4. In the Enable user management for provisioning click On. If you are using the Globalforce_SAML connector, you must turn on Enable user management for provisioning to ensure seamless SSO integration.
  6. Click Next. The Policies page appears.

  7. In Device Securityin Block jailbroken or rooted, click ON.
  8. In Network Requirements, configure the following settings:
    1. In WiFi required, click ON and then specify internal WiFi networks.
    2. In Internal network required, click ON if an internal network is required to run the app.
  9. Expand Worx Store Configuration to add an FAQ for the app, or add screen captures to help classify the app in the Worx Store. The graphic you upload must be of the type PNG. You cannot upload a GIF or JPEG image.

    In Allow app ratings, click ON to permit a user to rate the app.
  10. In Allow app comments, click ON to permit users to comment about the selected app.
  11. Click Next.
  12. On the Approvals page, in the Workflow to use list, optionally click a workflow or click Create a new workflow.

  13. When you create a new workflow, the XenMobile console changes to display configuration options for the approval process. Each of these fields is described in the following steps. Configure these fields if you need approval for creating user account.
    1. Specify a name for the workflow.
    2. Optionally enter a description.
    3. In Email Approval Templates field, click a notification option. Click the eye icon to preview the template you chose.

    4. In Levels of manager approval, click the level from None to 3.
    5. In Select Active Directory domain, click the domain.
    6. In Find additional required approvers, optionally enter additional required approvers and then click Search.
  14. Click Next.
  15. Optionally, on the Delivery Groups Assignment page, next to Choose delivery groups, type to find a delivery group or select a group or groups in the list to which you want to assign the policy.

    The groups you select appear in the right-hand Delivery groups to receive app assignment list.

  16. Expand Deployment Schedule and then configure the following settings:
    1. Next to Deploy, click ON to schedule deployment or click OFF to prevent deployment. The default option is ON. If you choose OFF, no other options need to be configured.
    2. Next to Deployment schedule, click Now or Later. The default option is Now.
    3. If you click Later, click the calendar icon and then select the date and time for deployment.
    4. Next to Deployment condition, click On every connection or click Only when previous deployment has failed. The default option is On every connection.
    5. Next to Deploy for always-on connection, click ON or OFF. The default option is OFF.
      Note: This option applies when you have configured the scheduling background deployment key in Settings > Server Properties. The always-on option is not available for iOS devices.
    Note: The deployment schedule you configure is the same for all platforms. Any changes you make apply to all platforms, except for Deploy for always on connection, which does not apply to iOS.

    Deployment schedule

  17. Click Save.