Redirect URI generated with IP address instead of FQDN when configuring Microsoft ID authentication.

Products

• VMware vCenter Server

Issue/Introduction

• When configuring Microsoft ID as the identity provider for vCenter authentication, the redirect URI is generated using the vCenter IP address instead of the FQDN.

Environment

VMware vCenter Server

Cause

• A mismatch between the vCenter hostname and the PNID caused vCenter to generate the redirect URI using the IP address instead of the FQDN.

Resolution

• Use VDT script to confirm if there is a mismatch between PNID and the hostname:
  
  Using the VCF Diagnostic Tool for vSphere (VDT)
  
  
  Or
  
  

  Verify the vCenter hostname:

  hostname

  Verify the PNID.

  /usr/lib/vmware-vmafd/bin/vmafd-cli get-pnid --server-name localhost

  
  
  
• Update the vCenter PNID so that it matches the configured FQDN of the vCenter host, see:
  
  Reconfigure the Primary Network Identifier
  
  
  

Additional Information

If updating the PNID from the VAMI is not possible in the affected environment, see the related article:

Unable to change PNID