2V0-21.23 Question 113
Select 3An organization wants to integrate its VMware vSphere environment with an external identity provider (IdP) to allow single sign-on (SSO) for administrators while maintaining centralized user management. Which scenarios would justify the use of identity federation for this purpose?
- A
The organization wants to enable multi-factor authentication (MFA) for vSphere users using its existing corporate IdP.
- B
The organization does not want to manage user accounts directly in the vSphere environment.
- C
The organization needs to provide temporary access to vSphere for external contractors without creating local accounts in vCenter.
- D
The organization is looking to improve storage performance for virtual machines in their vSphere environment.
Show answer and explanation
Correct answers: A, B, C
Explanation
Identity federation is used to integrate vSphere with external identity providers, enabling SSO, centralized user management, and advanced security features like MFA. It also simplifies user access control for temporary or external users. However, it is not related to performance improvements in vSphere components like storage.
- A. Correct.
Correct: Identity federation allows integration with an external IdP, enabling advanced authentication methods such as MFA for enhanced security.
- B. Correct.
Correct: By using identity federation, user accounts can be managed centrally in the external IdP rather than directly in the vSphere environment.
- C. Correct.
Correct: Identity federation supports role-based access control and temporary access by leveraging the external IdP, eliminating the need for local accounts.
- D. Incorrect.
Incorrect: Improving storage performance for virtual machines is unrelated to identity federation and requires other solutions like optimizing storage configurations or using faster storage technologies.