VCF 9.x unable to setup Identity Broker appliance in Appliance Deployment Mode

Products

• VCF Operations

Issue/Introduction

• The VCF Identity Broker appliance can be setup inside the VCF Operations, under Fleet Management > Identity & Access > SSO Overview.
  
  
• When trying to setup the same, the user isn't able to go beyond setting up the "Infrastructure Component" since the relevant vCenter server cannot be seen under "Select vCenter server" drop down menu.

Environment

VMware Cloud Foundation 9.x

Cause

This is an expected behavior provided that the Identity broker is already setup in Embedded Deployment Mode.

For a single vCenter Server/VCF instance, only a single mode of Identity Broker can be deployed. It can either be Embedded Deployment Mode or Appliance Deployment Mode. If the Embedded mode is already enabled on the vCenter/VCF instance, that vCenter/VCF instance won't show up under "Select vCenter server" drop down menu when configuring a new VCF Identity broker. 

Resolution

To setup the VCF Identity Broker in Appliance mode, the Embedded Deployment Mode configuration will have to be removed. To do the same,

• Login to VCF Operations. From the landing page, navigate to "Fleet Management > Identity & Access > VCF Instances". Select the concerned VCF instance.
  
  
• Under "Identity Source", click on "Reset SSO" option on the top right corner of the window.
  
  You should now be able to setup the VCF Identity broker as an appliance.

Additional Information

Deployment Modes of the VCF Identity Broker

Points to Consider and Prerequisites while Configuring VCF Single Sign-On