Unable to reconfigure SSO after SSO reset in VCF Operations 9.x

Products

• VCF Operations
• VMware vCenter Server
• VMware NSX

Issue/Introduction

• Reset SSO in VCF 9.0.
  
  
• Removed SSO configuration.
  
  
• Stale SSO Managed Status in vCenter.
  
  
• Stale SSO configuration in NSX.
• Unable to save new SSO configuration, "The configured credentials do not have sufficient privileges to perform this operation."

Environment

VCF 9.x

vCenter 9.x

Operations 9.x

NSX-T 9.x

Cause

Stale SSO configurations on vCenter and NSX are out of sync with Operations SSO reset and removed SSO configuration for the VCF 9 Instances.

Resolution

• Ensure that SSO for VCF is reset and not reconfigured.
  
  
• Clear the SSO Managed Status Ownership of vCenter.
  
  
• Manually remove the Identity provider configuration from NSX utilizing API calls.
  
  
• Reboot Operations, vCenter and NSX Manager appliances to clear any cached configurations for SSO.
  
  
• Re-configure VCF Single Sign-On Active Directory as an identity provider using AD/LDAP. After you have configured an identity provider for VCF Single Sign-On, connect vCenter and NSX components to the VCF Identity Broker for Single Sign-On-based access.