Configure Single Sign-on in VMware vCenter 5.5

VMware vCenter 5.5 Single Sign On authentication mechanism make your VMware environment more secure and it allows authenticate vCenter sign on with Active Directory user accounts. Lets begin to Configure Single Sign-on in VMware vCenter 5.5.

Open vSphere web client and login with administrator@vsphere.local user account and click Administration:

1ssorole

Expand Single-Sign on and click Configuration. Select Identity sources tab and click ADD +:

3ssorole

Select Identity source type, i will select Active Directory as a LDAP server and then fill all option selected and then test connection with Test Connection button and click ok:

 

4ssorole

Connection established windows will be popup click ok:

5ssorole

Then select the domain and click icon to set as default domain for vCenter:

6ssorole

After that you can give permission to vCenter for AD users and groups. Navigate to Home > vCenter and right click on vcenter server and All vCenter Actions-> Add Permission:

8ssorole

Click Add  and add the administrator domain user account, choose Administrator as assigned role and click OK.

9ssorole

10ssorole

11ssorole

After that Administrator AD user account will be administrator vCenter server.

Same way you can set permission to another vCenter resources (host,VMs,Datastores and etc) for AD users from Manage->Permission tab.

All of this permission you can give from VMware vSphere Client 5.5.