External Access to VMware Identity Manager Redirects to Internal Node FQDN Instead of Load Balancer VIP

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Users are unable to access the VMware Identity Manager (vIDM) environment from the external network. When the request is made to the Load Balancer Virtual IP (VIP) FQDN, the application redirects the session to an individual cluster node’s FQDN. Since the node FQDN is not externally routable, the connection results in a timeout and the service cannot be accessed externally.

Environment

VMware Identity Manager 3.3.7

Cause

The Identity Provider (IdP) Hostname is incorrectly configured with the FQDN of a specific cluster node instead of the Load Balancer VIP FQDN.

Resolution

Update the IdP Hostname configuration to use the Load Balancer VIP FQDN.

Steps:

1. Log in to the vIDM administrative console.

2. Navigate to Identity & Access Management → Identity Providers.

3. Select the Identity Provider.

4. Update the IdP Hostname field to the Load Balancer VIP FQDN.
   

5. Save the changes.