Proxy Support for vCenter Server Identity Provider Federation for AD FS

Products

• VMware vCenter Server

Issue/Introduction

Information in using a system proxy for configuring vCenter Server Identity Provider Federation for AD FS.

Symptoms:

• Attempting to configure vCenter Server Identity Provider Federation for AD FS as per https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/7-0/vsphere-authentication-7-0.html fails on step 6 with a 503 error.
• vCenter Server doesn't have direct access to the configured AD FS server.
• vCenter Server has it's system proxy configured for connections over HTTPS/HTTP.
• Curl/wget commands to the AD FS server succeed using the proxy.

Environment

VMware vCenter Server 7.x

Cause

The components involved (envoy service and SSO) do not support using a System Specified proxy.

Resolution

Allow vCenter to directly connect to the AD FS server in order to configure the Identity Provider.