(Legacy Users) Recreate Global OAuth App and Reauthorize VMware Cloud Flex Storage

If the global OAuth app used to give VMware Cloud Flex Storage components access to VMware Cloud services is deleted or changed, you can recreate it.

Note: This task is only for users who were users of VMware Cloud Flex Storage prior to August 2024. New users can ignore this information.

VMware Cloud Flex Storage leverages OAuth 2.0 apps to provided secure delegated access to VMware Cloud Services in your organization.

When you activate a VMware Cloud Flex Storage storage region for the first time as an Organization Owner, VMware Cloud Flex Storage creates a global OAuth app that manages the other OAuth apps used for each individual storage region.

The global OAuth app ensures that VMware Cloud Flex Storage cloud components can access VMware Cloud Services.

If the OAuth app is deleted or changed, you see an error message in the VMware Cloud Flex Storage UI stating that the OAuth app was deleted or changed, and you need to recreate it. You will also see this error message in the global console:

Organization-wide Authentication Policies

If your Organization's authentication policy blocks VMware Cloud Flex Storage IP addresses (there are three), then recreating the OAuth app will fail with an error message. This message contains three IP addresses that you must add as exceptions to the policy before you can recreate the OAuth app.

Procedure

1. In the VMware Cloud Flex Storage or global console UI, if an OAuth app was deleted or changed, you will see a banner at the top of the application.
2. Click the Recreate OAuth App button in the upper-right.
3. In the global console, from the Recreate Oauth App dialog box select the check box to authorize the creation of the global OAuth app, and then click Recreate OAuth App.
4. Next, from Settings > Flex Storage Settings in the global console, you can see the legacy OAuth app has authorized VMware Cloud Flex Storage.