If you want to add an Active Directory identity source to Platform Services Controller, you must join the Platform Services Controller appliance to an Active Directory domain.

If you are using a Platform Services Controller instance that is installed on Windows, you can use the domain to which that machine belongs.


  1. Using the vSphere Client, log in to a vCenter Server associated with the Platform Services Controller as a user with administrator privileges in the local vCenter Single Sign-On domain (vsphere.local by default).
  2. Select Administration.
  3. Expand Single Sign On and click Configuration.
  4. Click Active Directory Domain.
  5. Click Join AD, specify the domain, optional organizational unit, and user name and password, and click Join.

What to do next

To attach users and groups from the joined Active Directory domain, add the joined domain as a vCenter Single Sign-On identity source. See Add or Edit a vCenter Single Sign-On Identity Source.