Event Hooks for Workspace ONE – Integration Guide

Introduction

The Workspace One MDM features Event notifications, which are outbound calls sent by Workspace One to SecureW2 to make event-driven decisions.

This article helps in integrating SecureW2 with Workspace One’s event grid to revoke certificates in case of device deletion or a device wipe.

Prerequisites

The following are the prerequisites for setting up event notifications with Workspace One:

  1. Active subscription to Workspace One portal with Admin rights.
  2. An account in the JoinNow Management Portal with Cloud Connector and JoinNow Real-Time Intelligence subscriptions.

Configuring Event Hooks in JoinNow

Event Hook configuration in JoinNow involves the generation of a unique authentication Secret for the creation of an endpoint URL. To configure event hooks in JoinNow:

  1. Log in to the JoinNow Management Portal.
  2. Navigate to Integrations Hub > Device Control Platforms.
  3. Click Add.
  4. In the Name field, enter a name for the Workspace event hook.
  5. In the Description field, enter a description for the Workspace event hook.
  6. Click Save. The page refreshes and opens a Configurations tab.
  7. Copy the Notification URL and paste in a textpad for configuring the end point in Workspace.
  8. Click Download to acquire the Secret for configuring the end point in Workspace.
  9. Under Events, Select Revoke the associated certificate option for Device Delete and/or Device Wipe events as necessary.
  10. Click Update.

Configuring Event Notifications in Workspace One

  1. Login to Workspace One portal.
  2. Navigate to Groups & Settings > All Settings.

  3. Under System, click Advanced.
  4. Navigate to API > Event Notifications.
  5. Click ADD RULE.
  6. In the Add Event Notification box, in the Target Name field, enter a name for the event notification.
  7. In the Target URL field, enter the endpoint URL as explained below:
    1. Pull up the textpad with Notification URL acquired from JoinNow in the previous section.
    2. Open the.csv file downloaded from JoinNow portal. Copy the Authentication Secret.
    3. Paste the secret inside the notification URL as explained below:

      https://api.securew2.com/urlauth/<Authentication Secret>/V1/notify
  8. Scroll down to select specific events to trigger notifications from Workspace One. We recommend selecting options Device Delete, Device Unenrolled Enterprise Wipe, and Device Wipe options.
  9. Click Save.

An Event notification configuration is now created in Workspace One. Upon meeting proper conditions of device deletion or device wipe, the certificate for the device will be revoked. The device will subsequently be kicked out of the secure Wi-Fi network.