Remediate password using SDDC Manager returns Unable to obtain Security Token Service from SSO error

Products

• VMware SDDC Manager / VCF Installer

Issue/Introduction

Task returns as "Failed"

The task details will have this details:

Message: Unable to establish connection with resource.

Remediation Message: Please verify that the account is active and is not locked. If the password of the account has expired, manually reset the password in the product and then perform a REMEDIATE operation in the SDDC Manager, to update its stored copy of the password.

Reference Token: _TOKEN_

Cause: Unable to obtain Security Token Service from SSO 'VCENTER_NAME' as provided credentials are invalid

 

Environment

SDDC Manager 5.2.3

vCenter Server Appliance 8.0.x

Cause

This can happen when vCenter has different configurations than the SDDC Manager.

For instance, if a datacenter name is changed directly on vCenter, SDDC Manager will not be aware of that new name and can trigger this error.

Also, this error will return if the password used on the remediate password panel is different than the password already defined for the same user on vCenter.

Resolution

1. Make sure the inventory naming is the same across the environment.
   
   
2. Enforce the password first on vCenter, then try again the Remediate Password on SDDC Manager.