VCP-VMC 2024 Question 54
Select 3A VMware Cloud administrator is tasked with setting up secure authentication for users accessing the VMware Cloud Services Portal. The organization requires integration with an external identity provider (IdP) for Single Sign-On (SSO) and Multi-Factor Authentication (MFA). Which of the following authentication options would meet this requirement?
- A
Integrate VMware Cloud Services Portal with a SAML 2.0 compliant IdP
- B
Enable VMware Cloud’s built-in username and password authentication
- C
Set up OAuth 2.0 integration with the external IdP
- D
Configure VMware Cloud Services Portal to use federation with the organization's IdP
- E
Use VMware Cloud’s built-in MFA with external IdP integration
Show answer and explanation
Correct answers: A, C, D
Explanation
To meet the requirement of integrating VMware Cloud Services Portal with an external IdP for SSO and MFA, the administrator needs to use authentication methods that support federation or integration with the IdP. SAML 2.0, OAuth 2.0, and federation are the appropriate options as they enable secure authentication and SSO. VMware Cloud’s built-in authentication methods, including MFA, do not provide external IdP integration.
- A. Correct.
Integrating VMware Cloud Services Portal with a SAML 2.0 compliant IdP allows users to authenticate via the external identity provider, enabling Single Sign-On (SSO). This meets the requirement for integration with an external IdP.
- B. Incorrect.
Using VMware Cloud’s built-in username and password authentication does not allow integration with an external IdP or enable SSO, so it does not meet the requirement.
- C. Correct.
OAuth 2.0 integration with the external IdP is a valid option to provide secure authentication. It allows VMware Cloud Services Portal to leverage the IdP for user authentication.
- D. Correct.
Federation with the organization's IdP is another way to integrate the VMware Cloud Services Portal with an external identity provider for SSO and secure authentication.
- E. Incorrect.
VMware Cloud’s built-in MFA does not support direct integration with an external IdP. MFA must typically be managed through the external IdP in such scenarios.