VCF 9.x / vCenter Authentication Failure in Rubrik Security Cloud when Federated with Entra ID
search cancel

VCF 9.x / vCenter Authentication Failure in Rubrik Security Cloud when Federated with Entra ID

book

Article ID: 451642

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

  • With confirmed working EntraID credentials Rubrik shows the error Failed to validate session config and then get vCenter natural uuid with exception com.rubrik.apps.infinity.vmware.sdk.vim25.InvalidLoginFaultMsg: Cannot complete login due to an incorrect user name or password.
  • The same credentials work with a direct login to vCenter WebUI
  • A local vCenter service account can connect from Rubrik

 

  • vCenter logging

    identity-sts.log

    <DATE> INFO vmidentity-sts ##[vc@####threadName="tomcat-http--5" logger="com.vmware.identity.sts.ws.SOAPFaultHandler" corId="<LOGIN PROCESS UUID>"] Returning a SOAP Fault with code: ns0:FailedAuthentication and description: Invalid credentials

    vpxd.log

    <DATE> ERROR vpxd ####[vc@####sub="User" opID="UUID>"] Failed to authenticate user <SERVICE ACCOUNT NAME>
    #####:--> "<SERVICE ACCOUNT NAME>"

Cause

Rubrik currently may not support using a Microsoft Entra IDbacked vCenter identity as the vCenter service account.

Resolution

Engage Rubrik support to verify supported login workflows.

Powered by Wolken Software