VCP-CMA 2024 Question 50
Select 3As a VMware Cloud Administrator, you are tasked with integrating an external identity source into vRealize Automation (vRA) to allow users to log in using their corporate credentials. Your organization uses Microsoft Active Directory over LDAP as the identity source. Which steps should you follow to successfully configure the directory in vRA?
- A
Enter the Active Directory Domain name and specify the Bind DN and Bind Password.
- B
Configure the identity source using Integrated Windows Authentication (IWA).
- C
Provide the LDAP server address and port, and configure the Base DN for users and groups.
- D
Synchronize users and groups to vRA by mapping them to appropriate roles.
- E
Enable Just-In-Time (JIT) provisioning for automatic user creation during login.
Show answer and explanation
Correct answers: A, C, D
Explanation
Configuring an external identity source, such as Microsoft Active Directory over LDAP, in vRealize Automation involves specifying the directory connection details (domain name, Bind DN, Bind Password, LDAP server address, and port), defining the Base DN for users and groups, and synchronizing users and groups to vRA. Integrated Windows Authentication (IWA) and Just-In-Time (JIT) provisioning are not applicable for this configuration scenario.
- A. Correct.
Correct: Specifying the Active Directory Domain name, Bind DN, and Bind Password is necessary for establishing the connection to the LDAP server.
- B. Incorrect.
Incorrect: Integrated Windows Authentication (IWA) is not supported for directory integration in vRA; LDAP or LDAPS is required.
- C. Correct.
Correct: Providing the LDAP server address, port, and Base DN for users and groups is essential for the directory synchronization process.
- D. Correct.
Correct: Synchronizing users and groups and mapping them to roles enables proper access control within vRA.
- E. Incorrect.
Incorrect: JIT provisioning is not relevant in this scenario as it is not a requirement for configuring a directory in vRA.