Solved

vCenter 5.5 SSO

Posted on 2014-09-21
4
393 Views
Last Modified: 2014-09-22
I want to make sure I am understanding things correctly with SSO in vCenter. The password you give the adminstrator@vsphere.local account can only manage SSO options and nothing within vcenter correct? Does the root account has access into SSO by default?
0
Comment
Question by:compdigit44
4 Comments
 
LVL 11

Expert Comment

by:Ganesh Kumar A
ID: 40335411
Administrator access allows a user complete super user privileges on the Single Sign On system, including the ability to create users and groups, assign permissions, add identity sources, and modify policies (lockout and password). Upon installation, only one user (admin@System-Domain) has this role.
0
 
LVL 19

Author Comment

by:compdigit44
ID: 40335418
Thanks .. What I am trying to confirm is the SSO admin access is separate from vCEnter admin access.

Also root access on the vCenter appliances differs from SSO admin how?
0
 
LVL 5

Accepted Solution

by:
GG VP earned 250 total points
ID: 40335436
Yes, SSO sits between your AD/LDAP and vCenter Server and this takes the credentials and verifies with the source (AD/LDAP) and once successful it provides a security token to the authenticated user.

With this token user can access vSphere products (vCenter, vCloud directory, vCO).

For more detailed explanation, please visit below link,

http://vxpresss.blogspot.com/2013/12/part-2-architecting-vcenter-single-sign.html

YES, the administrator@vsphere.local by default has administrator access on vCenter.

Please refer below VMware documentation for further details,

http://pubs.vmware.com/vsphere-55/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-A2A90265-4A6B-4E23-9681-97B867E55457.html

Hope this helps!

Thank you!
0
 
LVL 119

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE^2)
Andrew Hancock (VMware vExpert / EE MVE^2) earned 250 total points
ID: 40335454
The password you give the adminstrator@vsphere.local account can only manage SSO options and nothing within vcenter correct?

It can manage and access both, (SSO and vCenter Server) it's like THE SUPER USER account, never lose the password, you cannot recover it if you forget it, (well not easily!).

e.g. normally after an installation you would login in as administrator@vsphere.local and then add Administrator access.

also - administrator@vsphere.local is a good account to use for Plugin Access and registration.....because it has overall rights to EVERYTHING! (and is non-AD, does not expire, or get locked!!!!)

Just give it a super secure password e.g. 26 letters, numbers and special chars, and lock in the vault!

root account, is an account specific for local root access to the local server e.g. Linux super user, it cannot access vCenter Server, but can configure the Host Appliance, e.g. change IP Address, look at logs, change scripts and config.

i.e. you may not want your vCenter Administrator, logging in or changing configuration on the Linux server.

root is a standalone user on the Linux appliance!
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Veeam Backup & Replication has added a new integration – Veeam Backup for Microsoft Office 365.  In this blog, we will discuss how you can benefit from Office 365 email backup with the Veeam’s new product and try to shed some light on the needs and …
Giving access to ESXi shell console is always an issue for IT departments to other Teams, or Projects. We need to find a way so that teams can use ESXTOP for their POCs, or tests without giving them the access to ESXi host shell console with a root …
Teach the user how to use create log bundles for vCenter Server or ESXi hosts Open vSphere Web Client: Generate vCenter Server and ESXi host log bundle:  Open vCenter Server Appliance Web Management interface and generate log bundle: Open vCenter Se…
This video shows you how to use a vSphere client to connect to your ESX host as the root user. Demonstrates the basic connection of bypassing certification set up. Demonstrates how to access the traditional view to begin managing your virtual mac…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question