vSphere Login Fails with Error "Invalid Credentials" When Using Active Directory (AD) Domain Credentials

Products

• VMware vCenter Server

Issue/Introduction

To fix Domain login issues on vCenter server

Symptoms:

vCenter Server Login with Domain credentials fails with Error : Invalid Credentials

 

Websso logs have below entries:

 

2023-09-13T11:15:04.483Z DEBUG websso[60:tomcat-http--21] [CorId=########-####-####-####-############] [com.vmware.vcenter.tokenservice.external.identitymanagement.AdfsIdentityManagementProvider] A default configured external identity provider was not found

 

 

Credentials works intermittently when User uses Full Domain Name during the login.

E.g. "[email protected]"

Environment

VMware vCenter Server 8.x
VMware vCenter Server 7.x

Cause

Using any "space" in the Domain Alias will be termed as invalid and cause logins to fail.

 

Domains cannot contain [space], the value of alias is invalid.

 

Resolution

Easiest way is to change "alias" to without any space e.g. "EXAMPLEDOMAIN", and that would allow Domain Users to login with EXAMPLEDOMAIN\exampleUser

 

Alternatively, Existing identity source can be deleted, and re-created with alias new name e.g. "EXAMPLEDOMAIN"

Additional Information

Impact/Risks:

Domain logins on vCenter/vSphere server will fail.