PingFederate integration with vCenter without using SCIM

Products

• VMware vCenter Server
• VMware vCenter Server 8.0

Issue/Introduction

System for Cross-domain Identity Management (SCIM) is an open standard that allows for the automation of user provisioning.

As it relates to vSphere, SCIM is used to push user and group information to the vCenter Server in order to perform user/group lookups on vCenter and to be able to assign vCenter permissions to those users or groups.

Environment

vCenter Server 8.0

Resolution

For vSphere 8.0, SCIM is a requirement. Users will be unable to fully utilized PingFederate with vCenter without the SCIM provisioning configured.

VMware engineering is aware of this limitation and has plans to introduce alternatives to SCIM in future major releases.