2V0-21.23 Question 111
Select 3An organization has implemented VMware vSphere 8.0 and wants to enable identity federation to integrate with their corporate identity provider (IdP) for user authentication. Which of the following is required to successfully configure identity federation in this environment?
- A
The corporate identity provider must support OpenID Connect (OIDC) protocol.
- B
A vCenter Single Sign-On (SSO) domain must already be configured.
- C
The organization's external identity provider must be configured to trust vCenter as a client.
- D
The vCenter Server must be configured to use only local accounts for authentication.
- E
An Identity Federation feature license must be applied to vCenter Server.
Show answer and explanation
Correct answers: A, B, C
Explanation
To enable identity federation in VMware vSphere, the external identity provider must support the OpenID Connect (OIDC) protocol, as this is the standard framework used for integration. Additionally, the vCenter Single Sign-On (SSO) domain must be configured beforehand as it provides the foundation for authentication in vSphere environments. The external identity provider must also trust the vCenter Server as a client to ensure secure communication and user authentication. Local accounts and special licenses are not prerequisites for configuring identity federation.
- A. Correct.
Correct: Identity federation in VMware vSphere requires that the external identity provider supports the OpenID Connect (OIDC) protocol as it is the standard used for integration.
- B. Correct.
Correct: vCenter Single Sign-On (SSO) provides the authentication framework for vSphere environments and is a prerequisite for enabling identity federation.
- C. Correct.
Correct: The organization's external identity provider must trust the vCenter Server as a client application to facilitate secure authentication flows.
- D. Incorrect.
Incorrect: Identity federation integrates external identity providers for authentication, rather than relying solely on local accounts.
- E. Incorrect.
Incorrect: There is no special license required to enable identity federation in vCenter Server; it is a feature available in vSphere 8.0.