"Sign in with local account" and "Sign in with LDAP" option is still available after configuring the Organization to use SAML Identity Provider

Products

• VMware Cloud Director

Issue/Introduction

"Sign in with local account" and "Sign in with LDAP" option is still available on the login page after configuring the Organization to use SAML Identity Provider

Environment

VMware Cloud Director 10.5.x

Cause

The design of VMware Cloud Director (vCD) is such that if multiple identity providers (such as SAML, LDAP, and Local) are configured, all configured options will be shown to users at the login screen. This is intended to provide flexibility in authentication methods for different user scenarios.

Resolution

This is an expected behavior. In VMware Cloud Director (vCD) version 10.5 and above, the product is designed to display all configured identity provider options on the login screen. This is intended to allow users to choose their preferred authentication method.
Currently, there is no built-in option in VMware Cloud Director (vCD) to disable specific login methods from appearing on the Provider page if multiple identity options have been configured.

Additional Information

It's not possible to disable the "SIGN IN WITH LOCAL ACCOUNT" and "Sign in with LDAP" option in the VMware Cloud Director (vCD) provider portal UI.
You should not create any local users in the provider portal, so that if any user tries to login with local account there credentials will not work and they will get "Authentication Error" message in login page.