2V0-41.24 Question 209
Select 3An organization plans to integrate VMware NSX with VMware Identity Manager to centralize authentication and improve role-based access control. Which of the following steps are required to successfully complete this integration?
- A
Configure NSX Manager to use VMware Identity Manager as the Primary Authentication Source.
- B
Add VMware Identity Manager as an Identity Source in NSX Manager.
- C
Ensure VMware Identity Manager is configured with a supported LDAP directory.
- D
Enable Single Sign-On (SSO) in NSX Manager using the Identity Manager URL.
- E
Create custom roles in VMware Identity Manager and assign them directly to NSX objects.
Show answer and explanation
Correct answers: B, C, D
Explanation
To integrate NSX with VMware Identity Manager, it is essential to add VMware Identity Manager as an Identity Source in NSX Manager, configure Identity Manager with a supported LDAP directory for user and group synchronization, and enable SSO in NSX Manager using the Identity Manager URL. These steps ensure seamless authentication and role-based access control for NSX resources. Misunderstandings, such as configuring roles directly in Identity Manager or setting it as a primary authentication source, do not align with the correct integration process.
- A. Incorrect.
This option is incorrect because NSX Manager does not directly configure VMware Identity Manager as a primary authentication source. Instead, VMware Identity Manager is added as an Identity Source in NSX Manager.
- B. Correct.
This option is correct because VMware Identity Manager must be added as an Identity Source in NSX Manager to enable authentication via Identity Manager.
- C. Correct.
This option is correct because VMware Identity Manager needs to be configured with a supported LDAP directory to synchronize user and group information for authentication.
- D. Correct.
This option is correct because enabling Single Sign-On (SSO) in NSX Manager requires the Identity Manager URL to establish trust and facilitate seamless authentication.
- E. Incorrect.
This option is incorrect because custom roles are created and managed within NSX Manager, not VMware Identity Manager. VMware Identity Manager handles authentication, not direct object-level permissions in NSX.