vCenter / vSphere 7 SAML authentication

[grahamdunne]

I'm trying to setup SSO for vCenter 7

I want to use Azure AD as we do not run any on-prem AD or I want to use something really lightweight as a proxy to Azure AD, if anything! SAML would be preferred

Does anyone know if this is possible? Has anyone achieved this?

I see SAML documentation for some VMware solutions but vSphere 7 docs only talk about ADFS, which I want to avoid if possible - I don't want on prem DCs etc. I don't see any documentation about using Azure AD as the identity provider with vCenter 7

If there is some other solution involving something lighter weight than ADFS that can be used with vCenter 7 and Azure AD (without ADFS) that anyone has experience of I'd be interested in that too! Things such as AD Connect or Azure AD Passthrough seem possibilities, we don't necessarily have to use SAML, anything that works is fine

Many thanks in advance for any experiences shared!

[jlhall87]

Did you manage to get anywhere with this?

I want to use Azure AD as the identity provider using OpenID. I have gone through the process of setting up an app registration in my Azure AD and going through configuring the identity provider but i cant get it working.