DavidRing.ie

• Active Directory (Integrated Windows Authentication)
• Active Directory as an LDAP server

Note: there are underlying issues using ‘AD Integrated Windows Authentication’ when VMware SRM is part of a solution.

The chosen SSO identity source outlined in this example is ‘Active Directory as an LDAP Server’. This is also the identity source configuration used for an EHC solution.

The following steps detail how to add AD LDAP authentication in vCenter 6.0 (PSC):

1. Browse to https://vcenter FQDN:9443 and login to the web client as the SSO administrator: administrator@vsphere.local.

2. Navigate to Administration->Single-sign-on->Configuration, then click the ‘Identity Sources’ tab.

3. Click the green + to add a new identity source.

4. Select Active Directory as an LDAP server and fill in the details. The following images provide an example configuration:

Default EHC vCenter SSO administrators:  app_nsx_sso, app_vro_sso, ehc_sysadmin

Assigning vCenter Server Roles

From the web client Click on ‘Home’, ‘vCenter Inventory Lists’, ‘vCenter Severs’:

Click on your desired vCenter server, ‘Manage’ and chose ‘permissions’ and click the green + to add and assign roles:

In the case of EHC the following roles apply:

– Add the DOMAIN\VC_Admins and assign the group the Administrator role.
– Add the DOMAIN\VC_App_Logins_RW and assign the group the
Administrator role.