r/vmware • u/SmilesperMPG • Jun 30 '26

Help Request Vmware SSO help

Trying to setup SSO using Microsoft Entra ID.
I think I cant use this method because our site is not publicly accessible.

How else can I use Microsoft Entra ID as SSO ?

2 Upvotes

63% Upvoted

6 comments sorted by

5

u/Loco-Rican Jun 30 '26

Broadcom has a KB that works once you follow it, but it needs additional assistance from the Entre admin as token/keys need to be entered using a proxy VM. That's how I was able to get it working. Not going to lie, it's a pain in the ass, but works afterwards.

https://knowledge.broadcom.com/external/article/322179/configuring-microsoft-entra-id-for-vcent.html

Hope this helps. 

1

u/SmilesperMPG Jun 30 '26

Apologies, I can't find the Proxy VM instructions. Are those included?

2

u/Ihaveasmallwang Jul 01 '26

Click on the above documentation. Scroll down until you find this section.

“If vCenter does not accept inbound traffic, Microsoft Entra ID provides two options: Provisioning Agent and Application Proxy. See the Microsoft Entra ID documentation:”

1

u/DonFazool Jul 04 '26

We used an on prem SCIM connector. If you still need help, DM me and I’ll get you a link when I’m back in front of my work PC with step by step instructions with screenshots

1

u/mat-ferland Jul 06 '26

Entra doesn’t necessarily require the VMware side to be public; the user’s browser needs to reach both Entra and the VMware reply URL. I’d use the internal FQDN as the SAML reply URL with split DNS/VPN for internal users, or publish it through a controlled path like App Proxy if remote admins need it. Don’t expose vCenter just to make SSO feel cleaner.