VCP-VCF Administrator 2024 Question 291
Select 3An administrator is tasked with configuring single sign-on (SSO) for a VMware Cloud Foundation environment using VMware Identity Manager (Workspace ONE Access). The organization requires integration with an external identity provider (IdP) that supports SAML 2.0. Which of the following steps must the administrator perform to complete the configuration?
- A
Import the SAML metadata file from the external identity provider into VMware Identity Manager.
- B
Configure the VMware Identity Manager connector to use LDAP for user authentication.
- C
Enable the built-in Kerberos authentication method in VMware Identity Manager.
- D
Create a third-party identity provider in VMware Identity Manager and map the required attributes.
- E
Ensure that the external identity provider is configured to recognize VMware Identity Manager as a service provider.
Show answer and explanation
Correct answers: A, D, E
Explanation
To configure SSO using VMware Identity Manager with a SAML 2.0 external identity provider, the administrator must establish a trust relationship by importing the SAML metadata file, configure VMware Identity Manager as a third-party identity provider, and ensure the external IdP recognizes VMware Identity Manager as a service provider. These are crucial steps to enable seamless authentication while adhering to the SAML protocol.
- A. Correct.
Correct: Importing the SAML metadata file from the external identity provider into VMware Identity Manager is essential to establish trust and configure SSO.
- B. Incorrect.
Incorrect: While the VMware Identity Manager connector can be used for LDAP integration, it is not required for SSO with a SAML-based external identity provider.
- C. Incorrect.
Incorrect: Kerberos authentication is a separate authentication method and is unrelated to SSO configuration with a SAML-based external identity provider.
- D. Correct.
Correct: Creating a third-party identity provider in VMware Identity Manager and mapping attributes ensures that user information is correctly passed during authentication.
- E. Correct.
Correct: The external identity provider must be configured to recognize VMware Identity Manager as a service provider to enable the SAML trust relationship.