VMware Workspace ONE
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Publisher | Microsoft |
| Support Tier | Microsoft |
| Support Link | https://support.microsoft.com |
| Categories | Security - Threat Protection |
| Version | 3.0.0 |
| Author | Microsoft - support@microsoft.com |
| First Published | 2026-05-07 |
| Last Updated | 2026-06-01 |
| Solution Folder | VMware Workspace ONE |
| Marketplace | Azure Marketplace · Popularity: 🔵 Medium (56%) |
The VMware Workspace ONE solution for Microsoft Sentinel enables ingestion of enrolled device inventory and installed application details from Workspace ONE UEM into Microsoft Sentinel. For more information about Workspace ONE UEM and its APIs, see the official Omnissa documentation: https://docs.omnissa.com/bundle/Workspace-ONE-UEM-API-programming-guide
Underlying Microsoft Technologies used:
- Microsoft Sentinel
- Azure Monitor Logs
- Data Collection Rules (DCR)
- Codeless Connector Framework (CCF)
Dependencies:
- A valid VMware Workspace ONE UEM tenant
- Workspace ONE API credentials
- API access to device inventory and installed application endpoints
Data Connectors
This solution provides 1 data connector(s):
Tables Used
This solution uses 2 table(s):
| Table | Used By Connectors | Used By Content |
|---|---|---|
VMwareWorkspaceOneDeviceApps_CL |
VMware Workspace ONE (via Codeless Connector Framework) | - |
VMwareWorkspaceOneDevices_CL |
VMware Workspace ONE (via Codeless Connector Framework) | - |
Release Notes
| Version | Date Modified (DD-MM-YYYY) | Change History |
|---|---|---|
| 3.0.0 | 18-05-2026 | First version of the VMware Workspace ONE CCF Connector. Added Workspace ONE device inventory ingestion support. Added installed application ingestion support using CCF pollers, DCR, and parsers. |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊