<aside> 🚨 This document is made to be used as part of Okta SCIM provisioning setup. Based on VMware Doc https://docs.vmware.com/en/VMware-Workspace-ONE-Access/services/ws1access-awprovisiongapp/GUID-A4024E40-DA13-472A-85B4-270C6341FD5E.html

</aside>

1. Login to the Workspace ONE Access Console and go to Resources - Web apps - New.

1. Search for the AirWatch Provisioning Application. Then click “next” all the way through and click Save (not Save & Assign)

1. Check the box next to your AirWatch Provisioning Application and select Edit

1. Click Next until you get to the Provisioning Tab. Enable certificate authentication, and then enter your group ID for your Workspace ONE UEM tenant (found in your UEM tenant by hovering over the white box at the top with the string of characters starting with M)

1. Click “Test Connection” and make sure it shows as successful. Also make sure “Enable Provisioning” is enabled
2. In the User Provisioning tab, make sure it looks like the below (this should already be populated)

1. Click next twice, and click “Save and Assign”
2. Next, assign the provisioning application to the appropriate users, with deployment type being automatic and entitlement type being include.

<aside> 🚨 Make sure you select users of the correct domain (likely okta.com as if you entitle the wrong user account, if duplicate, it will fail to provision)

</aside>

1. Click Save. Note: you can click save, exit out of the assignment page, and revisit assign to check on provisioning status of users through airwatch provisioning app.
2. Back in the web apps page, click New, and search for airwatch