In this post, I’ll cover how to configure VMware Identity Manager to support Active Directory Authentication for the vRealize Suite solutions<\/p>\r\n
Procedure<\/h4>\r\n\r\n\t- Log in to VMware Identity Manager<\/strong> and then access the Administration Console<\/strong>.\u00a0\u00a0<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-46-46-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Click Identity & Access Management<\/strong>, then click Setup > User Attributes<\/strong>.\r\n\r\n
\r\n\t- I elected to only require the AD account to have a Username<\/em> and a First Name<\/em>, so I unchecked all other options.\u00a0 This is optional and shouldn’t<\/span> be done in Production environments.\u00a0 The more security the better!<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-47-26-1024x585.png?resize=640%2C366\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-48-22-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Click Manage<\/strong>, then click Add Directory > Add Active Directory over LDAP\/IWA<\/strong><\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-52-21-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Provide a Directory Name, Base DN, Bind DN,<\/strong> and Bind User Password<\/strong> then click Test Connection<\/strong>.\u00a0 If it is Successful, click Save & Next<\/strong>.<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-52-48-1024x581.png?resize=640%2C363\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-53-22-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Select any domains that you’d like to add then click Next > Next<\/strong>.\r\n\r\n
\r\n\t- This was already selected and is unable to be unchecked.\u00a0\u00a0<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-54-18-1024x585.png?resize=640%2C366\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-55-03-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Add the group DNs<\/strong> and either check Select All<\/strong> box or click the Select<\/strong> button to add any Groups that are to be synchronized with VMware Identity Manager, then click Next<\/strong>.<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-56-31-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Add any user DNs<\/strong> that are to be synced as well and click Next<\/strong>.<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-57-09-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Review and make any changes if necessary then click Sync Directory<\/strong>.\r\n\r\n
\r\n\t- The sync will begin, after a bit click the Refresh<\/strong><\/em> button to see the the sync has finished<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-58-06-1024x585.png?resize=640%2C366\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-58-32-1024x585.png?resize=640%2C366\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_20-58-55-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- To confirm that the users and groups synced, click Users & Groups > Users\/Groups<\/strong>.<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-03-49-1024x585.png?resize=640%2C366\")
<\/p>\r\n
Now that the users I want are synced, I’d like to also give these users Super Admin<\/strong><\/em> rights to VMware Identity Manager.\u00a0<\/p>\r\n\r\n\t- Click Roles<\/strong>, then select the checkbox<\/strong> next to Super Admin<\/strong> and click Assign<\/strong>.\u00a0 Search for the users to add and when finished, click Save<\/strong>.<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-00-23-1024x585.png?resize=640%2C366\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-01-12-1024x585.png?resize=640%2C366\")
<\/p>\r\n
Now, I can successfully log in to VMware Identity Manager using the newly synced Active Directory accounts.\u00a0 But, before I can actually use these r accounts for other<\/em> products, the users need to be given access to login to the respective solution.\u00a0 In my case, I’ve only deployed vRealize Suite Lifecycle Manager so far.<\/p>\r\n\r\n\t- Log in to vRealize Lifecycle Manager<\/strong> with the local admin account<\/strong> then select User Management > User Management > Add User \/ Group<\/strong>.<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-05-03-1024x585.png?resize=640%2C366\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-05-36-1024x585.png?resize=640%2C366\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-06-06-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Search for the users to add and click Next<\/strong>.\u00a0<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_22-27-53-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Select the LCM Cloud Admin<\/strong> role and click Next<\/strong>.<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-07-18-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Review the Summary and click Submit<\/strong>.<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-07-44-1024x585.png?resize=640%2C366\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-08-07-1024x585.png?resize=640%2C366\")
<\/p>\r\n
One final step to go! Now that I’ve granted rights in vRealize Suite Lifecycle Manager, I’m able to entitle users in VMware Idenetity Manager to allow access to vRealize Suite Lifecycle Manager using VMware Identity Manger authentication.\u00a0 How sweet it that, right?!<\/p>\r\n
\r\n\t- Log in to VMware Identity Manager<\/strong> and access the Administration Console<\/strong> then Catalog<\/strong>.\u00a0 Select the checkbox<\/strong> next to the Application<\/strong> that is to be Entitled and click Assign<\/strong>.<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-10-29-1024x585.png?resize=640%2C366\")
<\/p>\r\n
\r\n\t- Search for the Users and\/or Groups to be Entitled then ( Optional: also Change the Deployment Type to Automatic<\/em> ) click Save<\/strong>.\u00a0<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-11-34-1024x581.png?resize=640%2C363\")
<\/p>\r\n
\r\n\t- Navigate to vRealize Suite Lifecycle Manager<\/strong> and select Identity Manager User<\/strong> from the drop-down<\/strong> selection, then click Login with Identity Manager<\/strong>.\u00a0 Success!!<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-11-59-1024x585.png?resize=640%2C366\")
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_21-14-57-1024x585.png?resize=640%2C366\")
<\/p>\r\n
Additionally, a user can also automatically authenticate into an Application from their Workspace One Access (VMware Identity Manager) User Portal.\u00a0<\/p>\r\n
\r\n\t- Click the Open<\/strong> link on the Application<\/strong> watch it launch the URL and authenticate the user Automagically<\/em>!<\/li>\r\n<\/ul>\r\n
![\"\"](\"https:\/\/i0.wp.com\/ithinkvirtual.com\/wp-content\/uploads\/2020\/01\/2020-01-05_23-13-35.gif?resize=640%2C360\")
<\/p>\r\n
<\/p>\r\n
Well, that about wraps up this post.\u00a0 In the next post, I’ll go over the deployment of vRealize Automation 8.0.<\/p>\r\n
I hope that you’ve found this useful and I thank each and every one of you for reading.<\/p>
<\/div>
<\/p>\r\n
- \r\n\t
- Click Identity & Access Management<\/strong>, then click Setup > User Attributes<\/strong>.\r\n\r\n
- \r\n\t
- I elected to only require the AD account to have a Username<\/em> and a First Name<\/em>, so I unchecked all other options.\u00a0 This is optional and shouldn’t<\/span> be done in Production environments.\u00a0 The more security the better!<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n <\/p>\r\n
- \r\n\t
- Click Manage<\/strong>, then click Add Directory > Add Active Directory over LDAP\/IWA<\/strong><\/li>\r\n<\/ul>\r\n<\/p>\r\n
- \r\n\t
- Provide a Directory Name, Base DN, Bind DN,<\/strong> and Bind User Password<\/strong> then click Test Connection<\/strong>.\u00a0 If it is Successful, click Save & Next<\/strong>.<\/li>\r\n<\/ul>\r\n <\/p>\r\n
- \r\n\t
- Select any domains that you’d like to add then click Next > Next<\/strong>.\r\n\r\n
- \r\n\t
- This was already selected and is unable to be unchecked.\u00a0\u00a0<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n <\/p>\r\n
- \r\n\t
- Add the group DNs<\/strong> and either check Select All<\/strong> box or click the Select<\/strong> button to add any Groups that are to be synchronized with VMware Identity Manager, then click Next<\/strong>.<\/li>\r\n<\/ul>\r\n<\/p>\r\n
- \r\n\t
- Add any user DNs<\/strong> that are to be synced as well and click Next<\/strong>.<\/li>\r\n<\/ul>\r\n<\/p>\r\n
- \r\n\t
- Review and make any changes if necessary then click Sync Directory<\/strong>.\r\n\r\n
- \r\n\t
- The sync will begin, after a bit click the Refresh<\/strong><\/em> button to see the the sync has finished<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n <\/p>\r\n
- \r\n\t
- To confirm that the users and groups synced, click Users & Groups > Users\/Groups<\/strong>.<\/li>\r\n<\/ul>\r\n<\/p>\r\n
Now that the users I want are synced, I’d like to also give these users Super Admin<\/strong><\/em> rights to VMware Identity Manager.\u00a0<\/p>\r\n
- \r\n\t
- Click Roles<\/strong>, then select the checkbox<\/strong> next to Super Admin<\/strong> and click Assign<\/strong>.\u00a0 Search for the users to add and when finished, click Save<\/strong>.<\/li>\r\n<\/ul>\r\n <\/p>\r\n
Now, I can successfully log in to VMware Identity Manager using the newly synced Active Directory accounts.\u00a0 But, before I can actually use these r accounts for other<\/em> products, the users need to be given access to login to the respective solution.\u00a0 In my case, I’ve only deployed vRealize Suite Lifecycle Manager so far.<\/p>\r\n
- \r\n\t
- Log in to vRealize Lifecycle Manager<\/strong> with the local admin account<\/strong> then select User Management > User Management > Add User \/ Group<\/strong>.<\/li>\r\n<\/ul>\r\n <\/p>\r\n
- \r\n\t
- Search for the users to add and click Next<\/strong>.\u00a0<\/li>\r\n<\/ul>\r\n<\/p>\r\n
- \r\n\t
- Select the LCM Cloud Admin<\/strong> role and click Next<\/strong>.<\/li>\r\n<\/ul>\r\n<\/p>\r\n
- \r\n\t
- Review the Summary and click Submit<\/strong>.<\/li>\r\n<\/ul>\r\n <\/p>\r\n
One final step to go! Now that I’ve granted rights in vRealize Suite Lifecycle Manager, I’m able to entitle users in VMware Idenetity Manager to allow access to vRealize Suite Lifecycle Manager using VMware Identity Manger authentication.\u00a0 How sweet it that, right?!<\/p>\r\n
- \r\n\t
- Log in to VMware Identity Manager<\/strong> and access the Administration Console<\/strong> then Catalog<\/strong>.\u00a0 Select the checkbox<\/strong> next to the Application<\/strong> that is to be Entitled and click Assign<\/strong>.<\/li>\r\n<\/ul>\r\n<\/p>\r\n
- \r\n\t
- Search for the Users and\/or Groups to be Entitled then ( Optional: also Change the Deployment Type to Automatic<\/em> ) click Save<\/strong>.\u00a0<\/li>\r\n<\/ul>\r\n<\/p>\r\n
- \r\n\t
- Navigate to vRealize Suite Lifecycle Manager<\/strong> and select Identity Manager User<\/strong> from the drop-down<\/strong> selection, then click Login with Identity Manager<\/strong>.\u00a0 Success!!<\/li>\r\n<\/ul>\r\n <\/p>\r\n
Additionally, a user can also automatically authenticate into an Application from their Workspace One Access (VMware Identity Manager) User Portal.\u00a0<\/p>\r\n
- \r\n\t
- Click the Open<\/strong> link on the Application<\/strong> watch it launch the URL and authenticate the user Automagically<\/em>!<\/li>\r\n<\/ul>\r\n<\/p>\r\n
<\/p>\r\n
Well, that about wraps up this post.\u00a0 In the next post, I’ll go over the deployment of vRealize Automation 8.0.<\/p>\r\n
I hope that you’ve found this useful and I thank each and every one of you for reading.<\/p>
<\/div>
- Click the Open<\/strong> link on the Application<\/strong> watch it launch the URL and authenticate the user Automagically<\/em>!<\/li>\r\n<\/ul>\r\n
- Navigate to vRealize Suite Lifecycle Manager<\/strong> and select Identity Manager User<\/strong> from the drop-down<\/strong> selection, then click Login with Identity Manager<\/strong>.\u00a0 Success!!<\/li>\r\n<\/ul>\r\n
- Search for the Users and\/or Groups to be Entitled then ( Optional: also Change the Deployment Type to Automatic<\/em> ) click Save<\/strong>.\u00a0<\/li>\r\n<\/ul>\r\n
- Log in to VMware Identity Manager<\/strong> and access the Administration Console<\/strong> then Catalog<\/strong>.\u00a0 Select the checkbox<\/strong> next to the Application<\/strong> that is to be Entitled and click Assign<\/strong>.<\/li>\r\n<\/ul>\r\n
- Review the Summary and click Submit<\/strong>.<\/li>\r\n<\/ul>\r\n
- Select the LCM Cloud Admin<\/strong> role and click Next<\/strong>.<\/li>\r\n<\/ul>\r\n
- Search for the users to add and click Next<\/strong>.\u00a0<\/li>\r\n<\/ul>\r\n
- Log in to vRealize Lifecycle Manager<\/strong> with the local admin account<\/strong> then select User Management > User Management > Add User \/ Group<\/strong>.<\/li>\r\n<\/ul>\r\n
- Click Roles<\/strong>, then select the checkbox<\/strong> next to Super Admin<\/strong> and click Assign<\/strong>.\u00a0 Search for the users to add and when finished, click Save<\/strong>.<\/li>\r\n<\/ul>\r\n
- To confirm that the users and groups synced, click Users & Groups > Users\/Groups<\/strong>.<\/li>\r\n<\/ul>\r\n
- The sync will begin, after a bit click the Refresh<\/strong><\/em> button to see the the sync has finished<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n
- Review and make any changes if necessary then click Sync Directory<\/strong>.\r\n\r\n
- Add any user DNs<\/strong> that are to be synced as well and click Next<\/strong>.<\/li>\r\n<\/ul>\r\n
- Add the group DNs<\/strong> and either check Select All<\/strong> box or click the Select<\/strong> button to add any Groups that are to be synchronized with VMware Identity Manager, then click Next<\/strong>.<\/li>\r\n<\/ul>\r\n
- This was already selected and is unable to be unchecked.\u00a0\u00a0<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n
- Select any domains that you’d like to add then click Next > Next<\/strong>.\r\n\r\n
- Provide a Directory Name, Base DN, Bind DN,<\/strong> and Bind User Password<\/strong> then click Test Connection<\/strong>.\u00a0 If it is Successful, click Save & Next<\/strong>.<\/li>\r\n<\/ul>\r\n
- Click Manage<\/strong>, then click Add Directory > Add Active Directory over LDAP\/IWA<\/strong><\/li>\r\n<\/ul>\r\n
- I elected to only require the AD account to have a Username<\/em> and a First Name<\/em>, so I unchecked all other options.\u00a0 This is optional and shouldn’t<\/span> be done in Production environments.\u00a0 The more security the better!<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n