2V0-21.23 Question 158
Select 4An administrator is preparing to deploy a new vSphere environment and wants to configure Single Sign-On (SSO) for centralized authentication. The administrator needs to ensure that all vCenter Server instances in the environment can communicate securely and share authentication information. Additionally, the administrator wants to integrate the environment with an existing Active Directory for user authentication. Which steps should the administrator perform to achieve this?
- A
Install the Platform Services Controller (PSC) and configure it to act as the SSO domain controller.
- B
Create a new SSO domain during the vCenter Server installation process.
- C
Join the vCenter Server to the existing Active Directory domain and configure it as an identity source.
- D
Deploy multiple SSO domains to ensure redundancy across vCenter Server instances.
- E
Use vSphere Client to configure permissions for Active Directory groups on vCenter resources.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To configure SSO in a vSphere environment, the administrator must install and configure the Platform Services Controller as it provides the SSO functionality. A new SSO domain should be created if one does not already exist. Integrating vCenter Server with Active Directory allows users to authenticate using their existing credentials, and permissions must be configured for AD groups to ensure proper access. Deploying multiple SSO domains is not recommended, as it would fragment the authentication infrastructure.
- A. Correct.
Correct: The Platform Services Controller (PSC) provides the SSO functionality, which is required for centralized authentication in a vSphere environment. It acts as the SSO domain controller.
- B. Correct.
Correct: Creating a new SSO domain during the vCenter Server installation is necessary if one does not already exist. This domain enables centralized authentication for all vCenter instances in the environment.
- C. Correct.
Correct: Joining vCenter Server to the Active Directory domain and configuring it as an identity source allows users to authenticate with their Active Directory credentials.
- D. Incorrect.
Incorrect: Deploying multiple SSO domains is not recommended, as this would create isolated environments. Instead, a single SSO domain ensures centralized authentication across all vCenter Servers.
- E. Correct.
Correct: Permissions for Active Directory groups must be configured in vSphere Client to enable proper access to vCenter resources. This is a necessary step after integrating vCenter with Active Directory.