Starting with vSphere 7.0, you can authenticate with vCenter Server by using external identity provider federation authentication.

To enable federated authentication to vCenter Server, you configure a connection to a third-party identity provider, such as Active Directory Federation Services (AD FS). The external identity provider replaces vCenter Server as your authentication authority. For more information, see the vSphere Authentication Guide.