2V0-21.23 Question 185
Single answerAn organization is configuring identity federation for their VMware vSphere environment using a third-party identity provider (IdP). They require users to authenticate using their corporate credentials and enable single sign-on (SSO) functionality. During the configuration, the administrator is prompted to provide metadata files from both vSphere and the IdP, as well as configure SAML settings. Which prerequisite must be met before successfully configuring identity federation?
- A
The third-party identity provider must support SAML 2.0.
- B
The ESXi hosts must be configured with the same NTP server as the identity provider.
- C
The vCenter Server must be added to an Active Directory domain.
- D
The identity provider must have access to the vCenter Server root credentials.
Show answer and explanation
Correct answer: A
Explanation
Identity federation in vSphere relies on the Security Assertion Markup Language (SAML) 2.0 protocol to enable secure and seamless integration with third-party identity providers. Ensuring the IdP supports SAML 2.0 is a critical prerequisite for successful federation configuration. Other factors, like NTP synchronization, while important for token validation, are not strict prerequisites.
- A. Correct.
Correct. The third-party identity provider must support SAML 2.0 as it is the protocol used for identity federation in vSphere environments.
- B. Incorrect.
Incorrect. While NTP synchronization is crucial for ensuring accurate timestamps in authentication tokens, it is not a strict prerequisite for configuring identity federation.
- C. Incorrect.
Incorrect. Adding the vCenter Server to an Active Directory domain is not required for configuring identity federation with a third-party IdP.
- D. Incorrect.
Incorrect. The identity provider does not require access to the vCenter Server root credentials. Integration relies on SAML metadata exchange and does not involve direct access to root credentials.