vRealize Operations uses authentication sources that enable you to import and authenticate users and user group information that reside on another machine: the Lightweight Directory Access Protocol (LDAP) platform-independent protocol, Active Directory, VMware Identity Manager, Single Sign-On, and Others.

Where You Manage Authentication Sources

To manage authentication sources, from the left menu, click Administration, and then click the Authentication Sources tile.

Table 1. Authentication Sources Toolbar and Data Grid
Option Description

Authentication Sources toolbar

To manage authentication sources, use the toolbar icons.
  • Add icon: Add an authentication source, and provide the information for the source in the Add Source for User and Group Import dialog box.
  • Click the Vertical Ellipses to perform any one of the following actions:
    • Edit. Edit the selected authentication source, and modify the details in the Edit Source dialog box.
    • Delete. Delete an authentication source.
    • Synchronize User Groups. Synchronize users within the groups imported through the selected Active Directory or LDAP authentication source.

Source Display Name

Name that you assign to the authentication source.

Source Type

Indicates the type of directory services access technology to access the source machine where the authentication database of user accounts resides. Options include:
  • Open LDAP: A platform-independent protocol that provides access to an LDAP database on another machine to import user accounts.
  • Active Directory or Other: Specifies any other LDAP-based directory services, such as Novel or Open DJ, used to import user accounts from an LDAP database on a Linux Mac machine.
  • SSO SAML: An open-standard data format that enables Web browser single sign-on.
  • VMware Identity Manager: A platform where you can manage users and groups, manage resources and user authentication, and access policies and entitle users to resources.

Host

Name or IP address of the host machine where the user database resides.

Port

Port used for the import.

Base DN

Base distinguished name for the user search. vRealize Operations locates only the users under the Base DN. The Base DN is an elementary entry for an imported user's distinguished name (DN), which is the base entry for the user name without the need for other related information such as the full path to the user account, or the inclusion of related domain components. Although vRealize Operations populates the Base DN, an Administrator must verify the Base DN before saving the LDAP configuration.

Auto Synchronization

When selected, enables vRealize Operations to map imported LDAP users to user groups.

Last Synchronized

Date and time that the synchronization last occurred.