2V0-21.23 Question 157
Select 3A company has deployed a vSphere environment and plans to integrate their existing Active Directory (AD) for centralized authentication and management. The administrator is tasked with configuring Single Sign-On (SSO) within vCenter Server. Which of the following is required to successfully configure SSO to integrate with the company's AD?
- A
Configure the vCenter Server to join the Active Directory domain.
- B
Set up an Identity Source in vSphere that points to the Active Directory domain.
- C
Create an LDAP binding user account with administrative privileges in the AD domain.
- D
Ensure that the AD Domain Controller is set up as a Platform Services Controller (PSC).
- E
Establish a trust relationship between VMware SSO and the Active Directory domain.
Show answer and explanation
Correct answers: A, B, E
Explanation
To successfully configure SSO with Active Directory, vCenter Server must join the Active Directory domain, an Identity Source pointing to the AD domain must be configured, and a trust relationship must be established between VMware SSO and the AD domain. These steps enable centralized authentication and user management within the vSphere environment. Administrative privileges for the LDAP binding user and configuring the AD Domain Controller as a PSC are not necessary or valid steps for this integration.
- A. Correct.
Correct: Joining vCenter Server to the AD domain is necessary for integrating it with the domain's authentication system.
- B. Correct.
Correct: An Identity Source must be configured in vSphere to point to the AD domain so that user authentication can be managed.
- C. Incorrect.
Incorrect: While an LDAP binding user is required for some directory services, it does not need administrative privileges for SSO integration.
- D. Incorrect.
Incorrect: The AD Domain Controller cannot act as a Platform Services Controller (PSC). PSC is a VMware-specific service that handles SSO, licensing, and other functions.
- E. Correct.
Correct: A trust relationship is required to allow VMware SSO to authenticate users against the Active Directory domain.