2V0-21.23 Question 156
Select 2An administrator is configuring vCenter Single Sign-On (SSO) in a vSphere environment. The goal is to ensure that external users from the organization's Active Directory (AD) domain can authenticate seamlessly without needing separate credentials. Which of the following steps must the administrator perform to achieve this goal?
- A
Add the Active Directory as an identity source in the vSphere SSO configuration.
- B
Create a local SSO user for each AD user who needs access.
- C
Set the vCenter SSO domain as the default identity source.
- D
Verify network connectivity between the vCenter Server and the Active Directory domain controllers.
- E
Enable two-factor authentication (2FA) for all users in the vSphere SSO configuration.
Show answer and explanation
Correct answers: A, D
Explanation
To enable seamless authentication for Active Directory users in vSphere SSO, the administrator must add the AD as an identity source and ensure that the vCenter Server can communicate with the AD domain controllers. These steps allow the SSO service to authenticate users using their AD credentials. Other options, such as creating local users or enabling 2FA, are either unnecessary or unrelated to the goal described in the scenario.
- A. Correct.
Adding the Active Directory as an identity source allows vSphere SSO to authenticate users against the AD domain, enabling seamless authentication.
- B. Incorrect.
Creating local SSO users is unnecessary when using Active Directory as an identity source, as AD users can authenticate directly.
- C. Incorrect.
While setting the default identity source is an optional convenience step, it is not mandatory to achieve the goal of enabling AD authentication.
- D. Correct.
Network connectivity between the vCenter Server and the AD domain controllers is essential for users to authenticate against the AD domain.
- E. Incorrect.
Enabling two-factor authentication is a security enhancement but is not required for seamless AD user authentication.