https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/VMWARE_2v0-51.23/page_9_img_2.jpg

SAML -> Connects the client to Workspace ONE Access

Certificate Authority -> Issues certificates for vrm and Enrollment Server

Connection Server -> Connects vrm to Active Directory

Enrollment Server -> Connects Workspace ONE Access to vrm

You can find more information about the Simple True 5SO Architecture in the VMware Horizon 8.x

Professional source documents or study guide1. This architecture is a simplified version of the True

SSO Architecture, which allows users to log in to their virtual desktops and applications without

entering credentials multiple times. The Simple True 5SO Architecture uses Workspace ONE Access

as the identity provider, which authenticates users with SAML and issues SAML assertions. The

Enrollment Server then uses the SAML assertions to request short-lived certificates from the

Certificate Authority, which are used to authenticate users to the Connection Server. The Connection

Server then connects users to their virtual desktops and applications through vrm, which is

integrated with Active Directory2.

Reference:

VMware Horizon 8.x Professional

Simple True SSO Architecture