To manage VMware Cloud Director instances by using the vRealize Orchestrator Plug-in for VMware Cloud Director, you must configure the connection parameters for each instance.


  • Using the Certificates tab of the Orchestrator Control Center, import the SSL certificate for the VMware Cloud Director instance that you want to connect.
  • Verify that VMware Cloud Director SSL certificate is imported in the VMware vRealize Orchestrator client.
  • Verify that the VMware vRealize Orchestrator server, the VMware Cloud Director server and Single Sign On server are synchronized with the NTP server. To synchronize the time, see Synchronize the Time by Using the vSphere Client.


  1. Log in to the vRealize Orchestrator client as an administrator.
  2. Click the Workflows view in left pane of the Orchestrator client.
  3. In the search box, enter Add a connection and press Enter.
  4. Click the Add a connection workflow and click Input Form.
  5. In the Host text box, type the IP address or the DNS name of the VMware Cloud Director instance.
  6. In the Port text box, type the port number.
    The default port is 443.
  7. Select whether to enable the new connection.
  8. In the Max. Connections text box, type the maximum number of concurrent connections to the VMware Cloud Director instance.
  9. In the Connection timeout (ms) text box, type the timeout interval in milliseconds.
  10. In the Cache timeout (s) text box, type the cache timeout interval in seconds.
  11. From the drop-down menu, select the API version that your VMware Cloud Director supports.
  12. If you want the new connection to be federated, select the Federated check box.
    By federating a connection, you can manage multiple VMware Cloud Director entities with associated organizations in vRealize Orchestrator Plug-in for VMware Cloud Director.
  13. Select whether to load the complete entity in the inventory view.
  14. Click Save.
  15. Click the Authentication tab.
  16. In the Session mode text box, start typing and select the authentication method for managing user access on the VMware Cloud Director instance.
    Option Description
    Per User Session

    Select this option if your VMware Cloud Director is in an Active Directory domain. Make sure that the user has the necessary permissions to perform the required operations.

    Caution: Each user who logs in to Orchestrator creates a session to the VMware Cloud Director instance. Multiple sessions can rapidly strain CPU, memory, and bandwidth.
    Shared Session Select this option to allow Orchestrator to create only one connection to the VMware Cloud Director instance. Type the credentials of a user who is a VMware Cloud Director administrator.
    Note: If the authentication data comes from LDAP or Single Sign On, make sure the VMware Cloud Directororganization is configured with the same LDAP or Single Sign On instance and the user is imported in this organization.
  17. Select whether to use SAML authentication and provide the needed details.
    Option Description
    No Provides basic authentication
    Yes Provides SAML authentication
  18. In the Organization text box, type the name of the organization that users can access, and click Submit.
    • Type System if you want administrators to be able to run User API, Admin API, and Admin Extensions API operations in all organizations on the VMware Cloud Director instance.
    • Type the name of a specific organization if you want to enable administrators to run only User API and Admin API operations in the specified organization.
  19. Repeat Step 4 through Step 18 for each VMware Cloud Director instance.