vSphere Client displays a maximum of 200 users or groups in Single Sign-On

Products

• VMware vCenter Server

Issue/Introduction

• When navigating to the Single Sign-On (SSO) management page in the vSphere Client (Administration > Single Sign-On > Users and Groups), the interface displays a maximum of 200 users or groups:
  
• You have noticed that newly created groups or users do not appear in the default list.
• The missing groups/users exist and function properly, but are not visible in the default UI list unless explicitly searched for.

Environment

VMware vCenter Server 7.x
VMware vCenter Server 8.x

Resolution

This is expected behavior.
vSphere Client UI displays only 200 users/groups initially, but there is now an option to search for any particular user/group.

If you want to have the list for all users/groups, you can get it from the PowerCLI commands:

1. Get-SsoGroup -Domain "vsphere.local"
2. Get-SsoPersonUser -Domain "vsphere.local"
   
   Note: The cmdlets above require the VMware.vSphere.SsoAdmin module (Install-Module VMware.vSphere.SsoAdmin).
   The PowerShell module VMware.vSphere.SsoAdmin is a combination of .NET binary libraries that provide access to vSphere SSO Admin APIs, along with PowerShell advanced functions that offer a cmdlet-like interface for vSphere SSO Admin features. This module is released as an Open Source project, meaning it is not an official release from VMware by Broadcom.
   For more information: PowerCLI module for managing vSphere SSO Admin - Support team limitations

Additional Information

PowerCLI module for managing vSphere SSO Admin - Support team limitations