When a vCenter Single Sign-Onuser account is disabled, the user cannot log in to the vCenter Single Sign-On server until the account is enabled by an administrator. You can disable and enable users from the vSphere Web Client interface.

Disabled user accounts remain available in the vCenter Single Sign-On system, but the user cannot log in or perform operations on the server. Users with administrator privileges can disable and enable users from the vCenter Users and Groups page.

Prerequisites

You must be a member of the vCenter Single Sign-On Administrators group to disable and enable vCenter Single Sign-On users.

Procedure

  1. Log in to the vSphere Web Client as administrator@vsphere.local or as another user with vCenter Single Sign-On administrator privileges.
    Users with vCenter Single Sign-On administrator privileges are in the Administrators group in the vsphere.local domain.
  2. Click Home, and browse to Administration > Single Sign-On > Users and Groups.
  3. Select a user, click the Disable icon, and click Yes when prompted.
  4. To enable the user again, right-click the user, select Enable, and click Yes when prompted.