NSX Manager log in UI Hangs or Fails During VCF SSO Login

Products

• VMware NSX
• VMware Cloud Foundation

Issue/Introduction

Users attempting to log into the VMware NSX Manager web interface using the VCF SSO option may experience a hanging or frozen UI.

This article provides the troubleshooting and resolution steps for this issue, which is caused by an OAuth2 credential mismatch between the NSX Manager and the VCF Identity Broker.

Environment

VMware Cloud Foundation

VMware NSX

Cause

The issue occurs when the OAuth2 Client Credentials (specifically the Client Secret) used for backend communications between the NSX Manager and the VCF Identity Broker expire, fall out of sync, or exceed their Time-To-Live (TTL). Although initial user authentication succeeds on the Identity Broker front-end, the backend token exchange and SCIM role queries fail with a 401 Unauthorized (invalid_client) response, preventing the login workflow from completing.

Resolution

To restore the trust relationship and push fresh OAuth2 credentials to the NSX Manager:

1. Log into the VCF Operations Manager (SDDC Manager) as an administrator.
2. Navigate to Identity & Access > VCF SSO Overview > Component Configuration.
3. Locate the affected NSX Manager instance(s) from the components data grid.
4. Select the checkbox next to the affected NSX Manager, click the Actions (...) menu, and select Unjoin SSO.
5. Wait for the status to transition from Unjoining... back to an unconfigured state.
6. Select the NSX Manager again and click Configure Component.
7. Monitor the status as it transitions through Configuring... until it displays Configured.
8. Log back into the NSX Manager using VCF SSO to verify that access is restored.

Additional Information

Broadcom KB 447583