How to set up Windows domain account Single Sign-on VCSA6.0

Background Description:

When we deploy VCSA, VMware prompts you not to use the same domain name as AD to create the SSO domain, so that you cannot use a domain administrator account for single sign-on when the deployment is complete, and the following describes how to implement a single login using an account in a Windows domain.

650) this.width=650; "Width=" 866 "height=" 552 "title=" 1.jpg "style=" WIDTH:710PX;HEIGHT:484PX; "alt=" Wkiom1v-hfdhsgojaah5nqmwmm0796.jpg "src=" Http://s3.51cto.com/wyfs02/M00/6E/82/wKiom1V-hfDhsgOJAAH5nQMwMM0796.jpg "/>

Operation Steps:

1. First ensure that the domain name is correctly parsed by DNS

2. Login to the web version of Vcenter, open the single sign-on configuration option, the recommended option is to ActiveDirectory as an LDAP server (combined with background description We know that SSO is not recommended and AD domain name is the same, So the first item may be problematic in subsequent use)

650) this.width=650; "Width=" 1035 "height=" 701 "title=" 5.jpg "style=" width:721px;height:603px; "alt=" Wkiol1v-irlskiijaalp5lrrcdi892.jpg "src=" http://s3.51cto.com/wyfs02/M00/6E/7F/ Wkiol1v-irlskiijaalp5lrrcdi892.jpg "/>3. After filling out the information, click Test Connection, click OK when the connection is successfully established.

650) this.width=650; "Width=" 645 "height=" 699 "title=" 6.jpg "style=" width:716px;height:715px; "alt=" Wkiol1v-i5xysjz7aaf9epwvtse730.jpg "src=" Http://s3.51cto.com/wyfs02/M01/6E/7F/wKioL1V-i5XysjZ7AAF9ePwVTsE730.jpg "/>

4. You can now see that the ad domain has been added to the identity source of the SSO domain

650) this.width=650; "Width=" 1190 "height=" 540 "title=" 15.jpg "style=" width:749px;height:510px; "alt=" Wkiom1v-iqnjw3ixaalhyn5h9qq860.jpg "src=" http://s3.51cto.com/wyfs02/M02/6E/83/ Wkiom1v-iqnjw3ixaalhyn5h9qq860.jpg "/>5. Click the single sing-on user and group, locate the Administrators group for the SSO domain, and then add the AD Domain Administrator account as a member of the group. You can use the AD Domain Administrator account to log in

650) this.width=650; "Width=" 908 "height=" 630 "title=" 17.jpg "style=" WIDTH:744PX;HEIGHT:626PX; "alt=" Wkiom1v-i9wrzev3aaodwll0oda509.jpg "src=" http://s3.51cto.com/wyfs02/M02/6E/83/ Wkiom1v-i9wrzev3aaodwll0oda509.jpg "/> Special attention:

In the 2nd step to set up information, there is a need to note that the realking.com.cn domain name as an example, here should be filled in as:

650) this.width=650; "Width=" 644 "height=" 698 "title=" 14.jpg "style=" width:731px;height:700px; "alt=" wKioL1V-ju-hDj_ Caahos84upeg305.jpg "src=" Http://s3.51cto.com/wyfs02/M01/6E/7F/wKioL1V-ju-hDj_CAAHOS84uPEg305.jpg "/>

But the small series has been filled with the DN information error, causing the test link to pass, but the total prompt operation failed when adding the identity source

650) this.width=650; "Width=" 1040 "height=" 735 "title=" 7.jpg "style=" width:743px;height:553px; "alt=" Wkiol1v-j0oc6ptsaanbkzndd5s414.jpg "src=" http://s3.51cto.com/wyfs02/M00/6E/7F/ Wkiol1v-j0oc6ptsaanbkzndd5s414.jpg "/>650) this.width=650;" Width= "height=" 859, "title=" X[RAUBV@~% "22D%Q" Yij{v8.png "style=" WIDTH:747PX;HEIGHT:619PX; "alt=" wkiom1v-jfesnkieaawnn8qjzng807.jpg "src=" http://s3.51cto.com/ Wyfs02/m01/6e/83/wkiom1v-jfesnkieaawnn8qjzng807.jpg "/>

Therefore, when filling in the DN information , must first go to DC input adsiedit.msc, to confirm, to avoid repeating the mistakes of the small series

650) this.width=650; "width=" 586 "height=" 369 "title=" 19.jpg "style=" width:742px;height:400px; "alt=" Wkiol1v-kpgz3ys4aak_zr-c3l8425.jpg "src=" Http://s3.51cto.com/wyfs02/M00/6E/80/wKioL1V-kpGz3yS4AAK_ZR-C3L8425.jpg "/>

How to set up Windows domain account Single Sign-on VCSA6.0