VCP-VCF Administrator 2024 Question 292
Select 3You are tasked with configuring single sign-on (SSO) for a VMware Cloud Foundation environment using VMware Identity Manager (Workspace ONE Access). To ensure a successful configuration, which steps should you take during the setup process?
- A
Ensure that the VMware Identity Manager appliance is synchronized with an NTP server.
- B
Configure the SAML metadata settings in VMware Identity Manager to integrate with vSphere.
- C
Manually set up user accounts in VMware Identity Manager to match the vSphere users.
- D
Enable certificate-based authentication as the only supported SSO method.
- E
Verify the directory integration to synchronize users and groups from an identity source.
Show answer and explanation
Correct answers: A, B, E
Explanation
To configure SSO using VMware Identity Manager, you must ensure that the system time is synchronized using an NTP server, as time discrepancies can cause authentication issues. Configuring the SAML metadata settings is required to enable the SSO trust relationship with vSphere. Additionally, directory integration is necessary to synchronize users and groups, eliminating the need for manual account creation. Configuring authentication methods such as certificate-based authentication is optional and dependent on organizational needs.
- A. Correct.
Correct. Synchronization with an NTP server is crucial for SSO to work properly and avoid time drift issues that could cause authentication failures.
- B. Correct.
Correct. Configuring the SAML metadata settings is necessary to establish trust and enable SSO functionality between VMware Identity Manager and vSphere.
- C. Incorrect.
Incorrect. User accounts should be synchronized with an external directory source, not manually created, to maintain consistency and scalability.
- D. Incorrect.
Incorrect. While certificate-based authentication is an option, it is not the only supported method. Multiple authentication methods can be configured based on the organization's requirements.
- E. Correct.
Correct. Directory integration ensures users and groups from an external identity source (e.g., Active Directory) are available in VMware Identity Manager for authentication.