You can use vCenter Single Sign-On with Windows Session Authentication (SSPI). You must join the vCenter Server to an Active Directory domain before you can use SSPI.


Note: When you configure vCenter Server to use federated authentication with Active Directory Federation Services, the Enhanced Authentication Plug-in only applies to configurations where vCenter Server is the identity provider (Active Directory over LDAP, Integrated Windows Authentication, and OpenLDAP configurations).


  1. Navigate to the vSphere Client login page.
  2. Select the Use Windows session authentication check box.
  3. Log in using the Active Directory user name and password.
    • If the Active Directory domain is the default identity source, log in with your user name, for example jlee.
    • Otherwise, include the domain name, for example,