2V0-21.23 Question 159
Select 3An administrator is tasked with configuring a single sign-on (SSO) domain for a new vSphere 8.0 environment. The organization requires that users from an existing Active Directory domain be able to log in to vCenter Server using their existing credentials. Which of the following steps should the administrator take to successfully configure the SSO domain?
- A
Create a new SSO domain with a unique domain name during the vCenter Server installation or deployment.
- B
Integrate the vCenter Server SSO domain with the organization's Active Directory by adding the AD domain as an identity source.
- C
Modify the default SSO domain name (vsphere.local) after the vCenter Server deployment is complete.
- D
Assign appropriate permissions to Active Directory groups or users in the vSphere environment.
- E
Configure the SSO domain to use LDAP instead of Active Directory for authentication.
Show answer and explanation
Correct answers: A, B, D
Explanation
To configure an SSO domain that integrates with an existing Active Directory, administrators must create an SSO domain during vCenter Server deployment, integrate Active Directory as an identity source, and assign permissions to the appropriate groups or users. Modifying the SSO domain name post-deployment is not supported, and LDAP is not relevant to this specific requirement.
- A. Correct.
Creating a new SSO domain with a unique domain name during vCenter Server installation is required to establish the SSO domain. This is a foundational step when setting up the environment.
- B. Correct.
Integrating the SSO domain with the organization's Active Directory by adding it as an identity source ensures that users can log in to vCenter Server using their existing AD credentials.
- C. Incorrect.
The default SSO domain name (vsphere.local) cannot be modified after deployment. Changing the domain name requires reinstalling or redeploying the vCenter Server.
- D. Correct.
Assigning appropriate permissions to Active Directory groups or users is necessary to allow them to access and manage resources within the vSphere environment.
- E. Incorrect.
Configuring the SSO domain to use LDAP instead of Active Directory is not required in this scenario, as the requirement specifically mentions integrating with Active Directory.