2V0-21.23 Question 106
Select 3Your organization uses an external identity provider (IdP) to manage user authentication. As part of the VMware vSphere environment, you are tasked with configuring identity federation to integrate the external IdP with vCenter Server. Which of the following is a required step to enable identity federation in vSphere?
- A
Configure the external IdP to support SAML 2.0 and retrieve its metadata file.
- B
Enable the Identity Federation feature within the ESXi host settings.
- C
Import the external IdP metadata file into the vSphere Client.
- D
Update the vSphere Distributed Switch (vDS) settings to support federation.
- E
Ensure the vCenter Server has a trusted SSL certificate.
Show answer and explanation
Correct answers: A, C, E
Explanation
To enable identity federation in vSphere, it is essential to integrate the external IdP with vCenter Server using SAML 2.0. The external IdP must support SAML 2.0 and provide a metadata file for configuration. This metadata is imported into the vSphere Client to establish a trust relationship. Additionally, a trusted SSL certificate is mandatory to ensure secure communication. Federation settings are not managed at the ESXi host level or through networking components such as vDS.
- A. Correct.
SAML 2.0 is the protocol used by VMware for identity federation. The external IdP must support SAML 2.0 and provide a metadata file for integration.
- B. Incorrect.
Identity Federation is not configured at the ESXi host level; it is managed through vCenter Server.
- C. Correct.
To establish a trust relationship, the metadata file from the external IdP must be imported into the vSphere Client.
- D. Incorrect.
vSphere Distributed Switch (vDS) settings are unrelated to identity federation. Federation focuses on authentication and identity management, not networking features.
- E. Correct.
A trusted SSL certificate is required for secure communication between vCenter Server and the external IdP.