An organization wants to prevent users from connecting to VMware Horizon desktop or application pools from a Horizon Pod deployed on their internal network unless the user selects the Horizon pool from the Unified Catalog of their Workspace ONE Access shared SaaS tenant.
Which additional setting must the organization administrator configure?
To achieve the goal of preventing users from connecting to VMware Horizon desktop or application pools directly from the internal network and ensuring users select the Horizon pool from the Unified Catalog of their Workspace ONE Access shared SaaS tenant, the organization administrator must configure the Workspace ONE Access tenant as a SAML 2.0 authenticator on all Horizon Connection Servers in the Horizon Pod. This setup ensures that authentication is handled through Workspace ONE Access, which enforces the use of the Unified Catalog.
it's B
answer B is the best answer. Delegation of authentication to VMware Horizon should be set to Required. (not allowed)