2V0-21.23 Question 109
Single answerAn organization is implementing VMware Identity Federation in their vSphere environment to integrate with their corporate identity provider (IdP). They plan to enable Single Sign-On (SSO) for administrators and require support for multi-factor authentication (MFA). Which component is required in the architecture of identity federation to achieve this integration?
- A
An external identity provider (IdP) that supports SAML or OpenID Connect protocols
- B
A dedicated VMware SSO server deployed in the environment
- C
A VMware vSphere Authentication Proxy configured to authenticate user requests
- D
An Active Directory server configured for LDAP over SSL
Show answer and explanation
Correct answer: A
Explanation
Identity federation in VMware vSphere allows integration with external identity providers (IdPs) to enable advanced authentication features like SSO and MFA. The external IdP must support standardized protocols such as SAML or OpenID Connect to handle authentication flows. This approach decouples authentication from the built-in VMware SSO capabilities and enables organizations to leverage their existing IdP solutions for enhanced security and user experience.
- A. Correct.
Correct: VMware Identity Federation requires an external identity provider (IdP) that supports standardized protocols like SAML or OpenID Connect to enable SSO and MFA. This IdP handles authentication requests and integrates with vSphere.
- B. Incorrect.
Incorrect: VMware SSO is a built-in component of vSphere but is not a separate server. Identity federation relies on an external IdP, not just the built-in SSO capabilities.
- C. Incorrect.
Incorrect: VMware vSphere Authentication Proxy is used to simplify authentication for Windows systems joining a domain, but it does not provide the capabilities needed for identity federation or MFA.
- D. Incorrect.
Incorrect: While Active Directory can be used for LDAP-based authentication, it is not a requirement for identity federation. Identity federation relies on external IdPs supporting SAML or OpenID Connect.