2V0-21.23 Question 110
Select 3An organization is planning to implement identity federation in their VMware vSphere environment. They want to enable Single Sign-On (SSO) for administrators using their existing Identity Provider (IdP). Which of the following components are required as part of the identity federation architecture in this scenario?
- A
An Identity Provider (IdP) that supports SAML or OpenID Connect protocols
- B
VMware vCenter Server with an integrated Platform Services Controller (PSC)
- C
Configuration of an external Active Directory (AD) as the primary authentication source
- D
A connection between the VMware vSphere environment and the IdP using federation protocols
- E
Deployment of an external database for storing federation metadata
Show answer and explanation
Correct answers: A, B, D
Explanation
To enable identity federation in a VMware vSphere environment, it is essential to have an Identity Provider (IdP) that supports SAML or OpenID Connect protocols, a VMware vCenter Server with an integrated Platform Services Controller (PSC), and a properly configured connection between the vSphere environment and the IdP using federation protocols. Active Directory and external databases are not mandatory components in this architecture.
- A. Correct.
Correct. An Identity Provider (IdP) that supports federation protocols such as SAML or OpenID Connect is a critical component in identity federation architecture. It is responsible for authenticating users and providing security tokens.
- B. Correct.
Correct. VMware vCenter Server is required as it is where the identity federation is configured. The Platform Services Controller (PSC) handles the vSphere authentication framework, enabling integration with the IdP.
- C. Incorrect.
Incorrect. While Active Directory can be used for authentication in certain scenarios, it is not a mandatory component in identity federation architecture. Identity federation relies on protocols like SAML or OpenID Connect rather than directly on Active Directory.
- D. Correct.
Correct. A connection between the VMware vSphere environment and the IdP is required to enable federation. This connection allows SSO tokens to be exchanged securely via federation protocols.
- E. Incorrect.
Incorrect. An external database is not required for storing federation metadata. Federation metadata is typically managed within the IdP and the vSphere environment.