Integration with Workspace ONE Access Broker for Single-Sign-On Access

You can allow users access to log in to NSX Manager or Local Manager by connecting VMware NSX to the Workspace ONE Access Broker in VMware vCenter, version 8.0 U2. To configure this capability, you must use the VMware Cloud Foundation SDDC Manager.

OIDC is a simple identity layer on top of the OAuth 2.0 protocol. OIDC provides a secure way to authenticate users by allowing different organizations to participate in authentication. For example, one organization can verify user identities while another organization decides whether to give users access to various services based on the groups to which that user belongs. OIDC can also obtain basic profile information about the user across applications.

Some organizations involved in an acquisition scenario can use OIDC to allow employees from either company to log into NSX.

For details on how to configure this capability, go to the VMware Cloud Foundation SDDC Manager user documentation at https://docs.vmware.com.

What to do next

Validate the OIDC authentication to ensure that your user can log in to the NSX Manager and has access to their Enterprise Admin capabilities such as the Tier-0 Gateways menu. For details about log in options, see Logging in to NSX Manager.