An administrator has registered an external identity source in a consolidated architecture and would like to make sure that any subsequent workload domains can be accessed using the same identity sources.
How can this goal be achieved with VMware Cloud Foundation?
To ensure that any subsequent workload domains can be accessed using the same identity sources within VMware Cloud Foundation, it is crucial to replicate the vSphere SSO (Single Sign-On) configuration. This replication ensures the consistency of identity management across all workload domains, allowing them to utilize the same identity sources without the need for reconfiguration. This approach centralizes identity source management and simplifies the operational overhead involved in maintaining multiple workload domains.
To ensure that any subsequent workload domains can be accessed using the same identity sources, it is necessary to replicate the vSphere SSO configuration across all the workload domains in a consolidated architecture deployment. This can be achieved by replicating the vSphere SSO configuration between the primary and additional SDDC Manager instances. This ensures that all the workload domains registered with the SDDC Manager will be able to consume resources and services from the same identity sources without any additional configuration in each individual workload domain. Reference: VMware Cloud Foundation: Consolidated Architecture Deployment 4.0 on Dell EMC VxRail - Technical Overview (Page 24) https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/vcf/tech-overview/vmware- cloud-foundation-consolidated-architecture-dell-emc-vxrail.pdf VMware Cloud Foundation Administration Guide https://docs.vmware.com/en/VMware-Cloud- Foundation/index.html
By replicating vSphere SSO configuration
IWA is depcreated and shouldnt be used at all. the SDDC Manager as a central GUI for the VCF consolidated Domain and future VI Workload domains has one single point for identity provider configuration. so I dont see a point for manually configuring vSphere SSO replication in ELM.