VCP-VMC 2024 Question 55
Select 2A company is planning to implement VMware Cloud Services and wants to ensure secure access to the VMware Cloud Services Portal. The organization requires the ability to integrate with their existing identity provider (IdP) and enforce multi-factor authentication (MFA) for all users. Which of the following authentication options would meet these requirements?
- A
Use VMware Cloud's built-in identity provider with multi-factor authentication enabled
- B
Integrate VMware Cloud Services Portal with the organization's SAML 2.0 compliant identity provider
- C
Enable VMware Cloud Services Portal's OAuth 2.0 authentication for external identity providers
- D
Use Active Directory Federation Services (ADFS) to integrate with VMware Cloud Services Portal
- E
Rely on local accounts within the VMware Cloud Services Portal
Show answer and explanation
Correct answers: B, D
Explanation
To meet the organization's requirements of integrating with their existing identity provider and enforcing multi-factor authentication, the best options are integrating with a SAML 2.0 compliant IdP or using ADFS as a SAML-based IdP. Both options provide seamless authentication and support MFA when configured correctly.
- A. Incorrect.
Using VMware Cloud's built-in identity provider with MFA can provide secure access, but it does not allow integration with the organization's existing identity provider. This does not meet the organization's requirement for IdP integration.
- B. Correct.
Integrating VMware Cloud Services Portal with the organization's SAML 2.0 compliant identity provider allows seamless authentication and supports enforcing MFA through the IdP. This meets both requirements.
- C. Incorrect.
OAuth 2.0 is a protocol used for delegated access and is not directly applicable to integrating the organization's existing IdP with the VMware Cloud Services Portal. This option is incorrect for the given scenario.
- D. Correct.
Using Active Directory Federation Services (ADFS) as a SAML-based identity provider allows integration with VMware Cloud Services Portal and supports MFA if configured on the ADFS side. This meets the requirements.
- E. Incorrect.
Relying on local accounts within the VMware Cloud Services Portal does not provide integration with the organization's existing IdP or support MFA enforcement. This option is not suitable for the scenario.