Configure SSO integration as a Day 2 operation for a product

VMware Identity Broker is a built-in container within vCenter that functions as a Single Sign-On (SSO) authentication method and supports the following VMware Aria Suite products:

• VMware Aria Automation Orchestrator
• VMware Aria Operations
• VMware Aria Operations for Logs

As a VMware Aria Suite Lifecycle administrator, you can add SSO integration to an installed product as a Day 2 operation. If you want to add SSO to multiple products in an existing VMware Aria Suite Lifecycle environment, see Add SSO integration to an existing environment.

Prerequisites

Verify that the product exists in your VMware Aria Suite Lifecycle environment.

Procedure

1. From the Environment page, select a product instance and right-click on the vertical ellipses.
2. Click VMware SSO Integration.
   Note: If VMware SSO Integration is not listed as a Day 2 operation, the product you selected does not support SSO integration.
3. Complete information in the fields on the VMware SSO integration form.
   • Datacenter. Enter the VMware Aria Suite Lifecycle datacenter.
   • vCenter Host. Enter the vCenter that belongs to the datacenter and where VMware Identity Broker is a built-in container.
   • Default Tenant. Leave the default value set to customer.
   • User Type. Select user or group.
   • User. Enter the username of the user with SSO privileges to integrate with VMware Identity Broker.
   • Domain. Enter the domain that the user belongs to.
     Note: Domain is required for VMware Aria Automation Orchestrator and VMware Aria Operations for Logs. It is not required for VMware Aria Operations.

   Click Submit.

   Note: If VMware Identity Broker is not a built-in container within the vCenter host, an error appears and you must correct the selection to continue.