Multifactor Factor Authentication in NSX
Article ID: 414328
Updated On:
Products
Issue/Introduction
VMware NSX enhances administrative security through Two-Factor Authentication (2FA).
While NSX does not include a built-in MFA service, it integrates seamlessly with VMware Workspace ONE Access (formerly VMware Identity Manager) to enable strong authentication and single sign-on (SSO).
Environment
VMware NSX
Resolution
NSX supports integration with external identity providers (IdPs) such as VMware Identity Manager (vIDM) or Workspace ONE Access, which can enforce multi-factor authentication (MFA / 2FA).
External identity providers (vIDM/Workspace ONE Access, or third-party IdPs) must support or be configured to use 2FA/MFA methods.
With this setup, NSX delegates the login authentication to the IdP, which handles the second factor, and then NSX applies role-based authorization for access control.
This allows administrators to add a stronger authentication layer (beyond just username/password) when accessing NSX elements.
Additional Information
For additional information, please refer the following Broadcom articles:
Feedback
