Use vCenter Single Sign-On with Windows Session Authentication

You can use vCenter Single Sign-On with Windows Session Authentication (SSPI). You must join the vCenter Server to an Active Directory domain before you can use SSPI.

Prerequisites

• Join the vCenter Server to an Active Directory domain. See Add a vCenter Server to an Active Directory Domain.
• Verify that the domain is set up properly. See the VMware knowledge base article at http://kb.vmware.com/kb/2064250.
• Verify that the Enhanced Authentication Plug-In is installed. See vCenter Server Installation and Setup.

Note: When you configure vCenter Server to use federated authentication with Active Directory Federation Services, the Enhanced Authentication Plug-in only applies to configurations where vCenter Server is the identity provider (Active Directory over LDAP, Integrated Windows Authentication, and OpenLDAP configurations).

Procedure

1. Navigate to the vSphere Client login page.
2. Select the Use Windows session authentication check box.
3. Log in using the Active Directory user name and password.
   • If the Active Directory domain is the default identity source, log in with your user name, for example jlee.
   • Otherwise, include the domain name, for example, [email protected].