You can use vCenter Single Sign-On with Windows Session Authentication (SSPI). You must join the vCenter Server to an Active Directory domain before you can use SSPI.
- Join the vCenter Server to an Active Directory domain. See Add a vCenter Server to an Active Directory Domain.
- Verify that the domain is set up properly. See the VMware knowledge base article at http://kb.vmware.com/kb/2064250.
- Verify that the Enhanced Authentication Plug-In is installed. See vCenter Server Installation and Setup.
Note: When you configure vCenter Server to use federated authentication with Active Directory Federation Services, the Enhanced Authentication Plug-in only applies to configurations where vCenter Server is the identity provider (Active Directory over LDAP, Integrated Windows Authentication, and OpenLDAP configurations).
- Navigate to the vSphere Client login page.
- Select the Use Windows session authentication check box.
- Log in using the Active Directory user name and password.
- If the Active Directory domain is the default identity source, log in with your user name, for example jlee.
- Otherwise, include the domain name, for example, firstname.lastname@example.org.