Comments on: VMware vCenter SSO Integration with Azure AD https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/ Documenting My Life as a System Administrator Fri, 20 Dec 2024 23:58:04 +0000 hourly 1 https://wordpress.org/?v=6.8.2 By: Juan https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/#comment-36623 Fri, 20 Dec 2024 23:58:04 +0000 https://thesysadminchannel.com/?p=4922#comment-36623 In reply to David.

Not sure if you were able to resolve this, but there are two issues that could be related to this error. The first is that you need to make sure for the app proxy, the vCenter server CA certs are installed.

If you’ve done and confirmed this.
Make sure you’re using the actual proxy address from the application you setup. Not the Tenant ID from vCenter.

Also make sure you clear out all of the previous password.

]]> By: Jason Steele https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/#comment-35618 Mon, 18 Nov 2024 22:46:51 +0000 https://thesysadminchannel.com/?p=4922#comment-35618 In reply to David.

We got the same error. What fixed it for us was at this step:
“Set the domain drop to which ever makes sense for you. Leaving the default is fine”
The default is apparently required. We changed it to something different and got the above error. However, once we switched it back to the default and saved, the connection test was successful and our SSO is working in vCenter now.

]]> By: vu https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/#comment-26934 Tue, 02 Apr 2024 02:10:55 +0000 https://thesysadminchannel.com/?p=4922#comment-26934 cannot create azure ad indentity provider. my vCenter try to reach to the Internet: login.microsoftonline.com which is not as I want.

]]> By: David https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/#comment-26632 Sun, 24 Mar 2024 10:26:13 +0000 https://thesysadminchannel.com/?p=4922#comment-26632 In reply to Harris.

Hi same thing, did you resolve it ?

]]> By: SaloT_T https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/#comment-25418 Wed, 28 Feb 2024 15:01:21 +0000 https://thesysadminchannel.com/?p=4922#comment-25418 Hi, we have an issue with OIDC. SCIM is working fine but when trying to login from vsphere we get access denied. From logs on vcenter found that there is an issue with access to login.microsoftonline.com
We are behind the proxy and even after adding proxy settings to ws1a-broker we see that connection trying to go directly to internet

]]> By: Harris https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/#comment-23054 Tue, 16 Jan 2024 17:36:11 +0000 https://thesysadminchannel.com/?p=4922#comment-23054 In reply to Chris Davis.

i got the same error did you manged to sort it?

]]> By: Chris Davis https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/#comment-22875 Thu, 11 Jan 2024 18:10:16 +0000 https://thesysadminchannel.com/?p=4922#comment-22875 My issue is at the Provisioning Mode. When testing connection for the Admin Credentials, I get the following error:
“You appear to have entered invalid credentials. Please confirm you are using the correct information for an administrative account.
Error code: SystemForCrossDomainIdentityManagementCredentialValidationUnavailable
Details: We received this unexpected response from your application:
We received an unexpected response from the target system. Please ensure the response is SCIM-compliant and in JSON format.
Please check the service and try again. ”

Any ideas?

]]> By: Chris Davis https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/#comment-22874 Thu, 11 Jan 2024 18:09:08 +0000 https://thesysadminchannel.com/?p=4922#comment-22874 My issue is at the Provisioning Mode. Adding in Admin Credentials and Testing the Connection, I get:

“You appear to have entered invalid credentials. Please confirm you are using the correct information for an administrative account.
Error code: SystemForCrossDomainIdentityManagementCredentialValidationUnavailable
Details: We received this unexpected response from your application:
We received an unexpected response from the target system. Please ensure the response is SCIM-compliant and in JSON format.
Please check the service and try again. ”

Any ideas?

]]> By: MriP https://thesysadminchannel.com/vmware-vcenter-sso-integration-with-azure-ad/#comment-22434 Thu, 28 Dec 2023 04:20:46 +0000 https://thesysadminchannel.com/?p=4922#comment-22434 Thank you for the great write-up. Worked like a charm for my home lab.

]]>