If you are not using an external identity provider, you must understand the underlying architecture of the built-in identity provider, vCenter Single Sign-On, and how it affects installation and upgrades.