Cannot logon to vCenter appliance with windows credentials

A new vcenter appliance is accessible using VMware credentials but we cannot logon using the "use Windows session credentials" option.  the option to enable Active Directory is checked and the domain is entered.  there is an existing vcenter appliance that does not have any logon issues and the new appliance was compared to that one.  We cannot find any differences.  If I try to add a permission in VMware I do not see the domain to allow me to add a group domain or user so I'm assuming it is not in synch with the domain.  Where should I begin looking for the problem?
NytroZAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Did you add the Domain as an Authentication Source to SSO ?

otherwise you will just be able to login with the SSO credentials, until you assign permissions and group to AD (Domain).
NytroZAuthor Commented:
Is that the same as what is added here?
 vca-domain.png
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
You need to go into the Web Client, using the SSO Administrator account, and then add your AD Groups.

Select Administrator, when logged in with SSO. At present it does not know, which AD groups or usernames have access.

e.g. if you want all Domain Admins to have Administrator Access you add that group, or create a new special group in AD, called vSphere Admins, and add that group. and then do not forget to add AD users to the Global Group.

At present the only account is the SSO Account which has default access, which is Administrator.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
NytroZAuthor Commented:
That worked!  I added the domain as an identity source in the web client then added the group that needs access.  Thank you for your help!

Again!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.