Attempting to configure NSX 4.2.3.2.0.2577145 to utilize vCenter 8 as an identity broker with ADFS for multifactor authentication without success.

Products

• VMware NSX
• VMware vCenter Server

Issue/Introduction

• NSX 4.2
• vCenter 8.x
• ADFS
• MFA (Multi-Factor Authentication)

Environment

NSX 4.2.x

vCenter 8.x

Cause

vCenter configuration for ADFS uses "VcIdentityProvider" and is not supported.

 

Only Federated IDPs (i.e., Okta and Entra) using vCenter 8.x "VM Identity Services" are Supported.

Resolution

• Upgrade to VCF 9.x to use VMware Identity Broker.

or

• Use MS Entra ID or OKTA Federated IDPs.

Additional Information

• Procedure to configure Single Sign-On on standalone NSX 4.2.
  
  
• After you deploy VCF, you can configure VCF single sign-on by using an external identity provider and then sign in to VCF components by using VCF single sign-on. The identity broker component handles the single sign-on functionality.
  
  
  • Identity Providers Supported
    
    
    • You can configure the following identity providers:
      
      
      • OktaPing Identity, Microsoft Entra ID, Microsoft Active Directory Federation Services (ADFS), Symantec Identity Security Platform, Any SAML 2.0 Identity Providers, Any OIDC Identity Providers